sha1, md5, and so on (making serial numbers)

[tester]

A friend of mine asked me to create an app with some security inside it, so...

He would like to automatically generate individual serial numbers from his website (php), and he said that he knows how to implement these two stuff things: sha1 and md5. He would like to make these serial numbers depend on customer data.

So. As far I understand (or not) - these routines mentioned above work like this. You have a special key for encryption routine, and the encryption routine itself (used like: input1 match input 2 = unblock).

Question. Is this available in FS? Via ruby for example? Could someone post the encrypt/decrypt modules? Is there anything else (other formulas), that can I make him aware of?

[CoreStylerz]

I don't belive that strong string encruption will lead to better security. Crackers don't fear that at all.
Sha1 add a greater level of complexity but i think the software protection should be focused on the "core" not in the key.

If you have a super encripted key maybe a serial key generator will be hard work for crackers, but they can access memory and change some parts of you software or directly check the numbers involved to the algo.

Also they can find a way to use NOP inside your protection, bypassing it.

Focus on the implementation, not the key.

PS: if you just want to not show to normal user what us save and submit, you can use HEX prim or Base64 encoding. DWB made the module for encoding and decoding base64.
And this in php is simple, just:
base64_decode ($var);

[tester]

I have the base64 for it right now, was posted here on FS forum (and has no lenght limitation like the one om SM prims - I use it for something else too). But base64 (at least this one) does not have an " internal key", and it can be decoded by many websites that offer such sort of simple conversion. Additional internal key for encryption - removes these websites from the list. Nothing else.

As for me - I'm not hot on protections too. But that friend asked me for this security level, so I'd like to give it to him (besides I follow my curiosity). Security level is designed to cover your target market, which is something separate than market of crackers. It is rather a matter of preventing "certain group of accidental actions" within your target market, than doing the "ultimate security".

Thus - I repeat my question for FS solution on what I wrote in first post.

[digitalwhitebyte]

Pure MD5 and SHA1 implementation.

Pure_Ruby_SHA1_&_MD5_implementation_DWB~2013.fsm

Pure_Ruby_SHA1_&_MD5_implementation_DWB~2013

(2.64 KiB) Downloaded 930 times

Pre-Christmas-Gift
some time... came back to the past.

@CoreStylerz
La mia idea di protezione funziona bene?
finalmente hai finito il lato server Bravo complimenti

[CoreStylerz]

Ciao DWB.
Si ho leggermente variato la cosa però di base è come lo avevi ideato tu. Vuoi l'esempio/sorgente?
Piu che altro lo script và adattato ad ogni sito, non è flessibilissimo. Comunque per la generazione ho utilizzato il CODE e i Chucks dell'ID come suggerito da te.

[Drnkhobo]

Very nice DWB, any help on how to use in projects??

Thanks

[digitalwhitebyte]

LOOK HERE
It is the basic concept....
http://www.venishjoe.net/2009/08/basic- ... le-in.html

[Drnkhobo]

nice one, thanks DWB

[tester]

Pure MD5 and SHA1 implementation.

Pure_Ruby_SHA1_&_MD5_implementation_DWB~2013.fsm

Pre-Christmas-Gift
some time... came back to the past.

Thanks Santa DWB!
May I ask for some examples on how to use it?