akio-tanaka / lickey Goto Github PK

maybe this great idea?

My propose about this extension
https://marketplace.visualstudio.com/items?itemName=Lukamicoder.AStyleExtension2017
https://github.com/lukamicoder/astyle-extension (VS 2019)

Make please config, and share.

I think that the use of CRT will be a weak point in this project. What do you think?

Hi, I tried to compile and use this library and found the result in debug and release are different, both for generating license or loading license. It can be reproduce by run the lickey_test application (of course I need to change the test code to use the same key which license is generated. the license expired as expected, but the license can be loaded in debug mode but failed in release)

the message below:
In Release mode:
[2020-10-26 09:29:11.062762] [0x000006a8] [info] start to load license file = test(CC-E1-D5-41-21-D6).txt
[2020-10-26 09:29:11.063761] [0x000006a8] [info] done to convert feature successfully (name = base)

[2020-10-26 09:29:11.064760] [0x000006a8] [error] invalid data section
[2020-10-26 09:29:11.064760] [0x000006a8] [error] fail to decrypt
c:/work/dev/source/lickey2/src/lickey_test/licensemanagertest.h(26): error: in "LicenseManagerTest/Constructor01": check false == lic.FeatureMap().IsExpired("base") has failed [false != true]
[2020-10-26 09:29:11.064760] [0x000006a8] [error] invalid sign
c:/work/dev/source/lickey2/src/lickey_test/licensemanagertest.h(27): error: in "LicenseManagerTest/Constructor01": check true == lic.FeatureMap().IsValid("base") has failed [true != false]
[2020-10-26 09:29:11.065756] [0x000006a8] [error] license is not loaded

In debug mode:
[2020-10-26 09:29:58.962658] [0x000024a8] [info] start to load license file = test(CC-E1-D5-41-21-D6).txt
[2020-10-26 09:29:58.969691] [0x000024a8] [info] done to convert feature successfully (name = base)

c:/work/dev/source/lickey2/src/lickey_test/licensemanagertest.h(26): error: in "LicenseManagerTest/Constructor01": check false == lic.FeatureMap().IsExpired("base") has failed [false != true]

*** 6 failures are detected in the test module "my_mod"

Nice license library.

But I have aquestion about the salt generation.

It seems explicitSalt and implicitSalt are all generated by MakeSalt when generation a license.

In code below:

bool MakeSalt(Salt& salt)
{
    unsigned char tmp[32] = {0};

    std::string encoded;
    EncodeBase64(tmp, 32, encoded);
    salt = encoded;
    return true;
}

the salt based64 with empty string alwayas be 'AAAAAAAAAAAAA...', which will cause all salt be same. It will not be safe for usage. Is it necessary to customize the salt value with any interface?

Make this project like a Pro 🍰

• obfs4 (https://hamy.io/post/000d/how-to-hide-obfuscate-any-traffic-using-obfs4/)
• client (rewritten to dll and use https://github.com/stephenfewer/ReflectiveDLLInjection)

Maybe refactoring this methods?

Too many parameters..

hello

the problem is that if the license has expired, then you can change the system time ago and get a valid license

should be fixed

make the following document:

• readme including current and planned functions
• design doc

Hi!

Are you working on a project?
If you work, what is ready? I have time to help develop

If you use virtualization (VMProtect/Themida/Enigma/SafeEngine) need bypass vulnerable external calls.

Example: leak password from strcmp if function not protect.

Using __forceinline solve this problem.

Maybe create branch?

Maybe make this project to cmake?

Code crossplatform?