-
Notifications
You must be signed in to change notification settings - Fork 90
Integrity protection #15
New issue
Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? # to your account
base: master
Are you sure you want to change the base?
Conversation
@developer-variety Thanks, will glad to see your fork :D |
file.BaseStream.Position = file.BaseStream.Length - 32; | ||
string b = Encoding.ASCII.GetString(file.ReadBytes(32)); | ||
|
||
if (a != b) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I still haven't pushed this PR because there is a huge security flaw here : what prevents me from decompiling the protected file and NOP this if statement ? @rexyrexy
|
||
internal static string Hash(byte[] metin) | ||
{ | ||
MD5CryptoServiceProvider md5 = new MD5CryptoServiceProvider(); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
MD5 is extremely obsolete, even something as old as SHA-1 is faster and more secure.
Any updates on this? |
No description provided.