Home - Forums-.NET - Spices.Net - Several question after evaluation

Spices.Net

NET code security, tools to protect, obfuscate, tamper defense, code and data safety, recover, convert, optimize, explore, browse and analyze .Net software.

This forum related to following products: Spices.Net Suite, Spices.Net Obfuscator, Spices.Net Decompiler

Several question after evaluation
Link Posted: 22-Apr-2007 21:52
Hi,

I already sent this post to support@9rays.net but with no answer since several days, I post it now on the forum.
---
Always in evaluation phase, I have some product-related questions:
[list]Does Spices.VSIP.Net also include the Spices.Net Explorer with the Obfuscator plugin?[/list:u][list] In addition to being integrated in VisualStudio, can Spices.VSIP.Net obfuscate assemblies/applications produced by Delphi.NET?  In fact, we often develop with both Delphi.NET and VisualStudio, and I would like to know if Spices.VSIP.Net could be used for these two kinds of projects, either by standalone Spices.NET Explorer or by script.[/list:u][list]What's the behavior of \"Add to Excludes\" when I select a class? Is the class name preserved or the whole class content with its members are preserved (it seems not), or only the class name and their variables and properties members? How to preserve the whole class? Have I to add manually to excludes the class name and all its members individually? It seems a long task, because it is not possible to select multiple items in the hierarchy tree in the explorer tab.[/list:u][list] Is there a way to preserve (exclude) a particular member method name, and obfuscate the formal parameters and also the method content. I am not sure, maybe it is the default behavior, for example for the public methods when we set them not to be encrypted.[/list:u][list]If I choose to set the strings encryption mode to \"Hide\" for the assembly, is there a way for example declaratively, to encrypt a particular string with \"Encrypt\" or \"Encrypt3DES\" mode? For example, for a password or a sensitive string content?[/list:u][list]The unique key used to obtain the activation code uniquely identifies the machine. Is this mecanism similar to the activation of Windows XP where some changes in the hardware configuration of the machine could make the activation invalid? Example, adding or changing harddisks, network card, MAC address, etc.[/list:u][list]Spices.VSIP.Obfuscator is similar to Spices.VSIP.Net Suite except that it lacks the Decompiler, is it right or is there anything less?[/list:u][list]Spices.VSIP.Obfuscator is for 1 developer machine. Is it possible to use the build version (command line, or compatible with MSBuild/NAnt) on another machine in order to obfuscate code just before release by the AQ dept?[/list:u]
On the other hand, I noted some strange behavior that I give your here below:
[list]If I right-click on a member method and select \"Add to Excludes\", this method is added to the Excludes list that is displayed on the Properties tab.
[/list:u][list]At some point, the method that I selected as excluded, is no more striked through on the explorer tab. Looking in the Properties tab, I can check that the method is still in the Exclude list, but in the explorer tab it does not appear visually as excluded.[/list:u]

Thanks in advance.
Link Posted: 24-Apr-2007 06:17
Hello 9rays,

Concerning my last post, I really really need an answer because I have to decide to buy or not Spices for our developments.

At least, I need an quick answer to the 2nd question, I repeat below:

- In addition to being integrated in VisualStudio, can Spices.VSIP.Net obfuscate assemblies/applications produced by Delphi.NET? In fact, we often develop with both Delphi.NET and VisualStudio, and I would like to know if Spices.VSIP.Net could be used for these two kinds of projects, either by standalone Spices.NET Explorer or by script.

I understand that you need time to answer all my 8 questions, but it makes more than 5 days I have no feedback at all and we cannot delay production release and customer installation.

Thanks in advance.
Link Posted: 24-Apr-2007 07:06
I already sent this post to support@9rays.net but with no answer since several days

Probably your message has been blocked by antispam filter, usually we're answer within 4-8 hours.
Does Spices.VSIP.Net also include the Spices.Net Explorer with the Obfuscator plugin?

Yes, Spices.VSIP includes Spices.Net GUI version of Spices.Obfuscator and Spices.Obfuscator console plugin.

In addition to being integrated in VisualStudio, can Spices.VSIP.Net obfuscate assemblies/applications produced by Delphi.NET? In fact, we often develop with both Delphi.NET and VisualStudio, and I would like to know if Spices.VSIP.Net could be used for these two kinds of projects, either by standalone Spices.NET Explorer or by script.

Yes, Spices.VSIP could be used for these purposes.

Is there a way to preserve (exclude) a particular member method name, and obfuscate the formal parameters and also the method content. I am not sure, maybe it is the default behavior, for example for the public methods when we set them not to be encrypted.


You can use NineRays.ObfuscationAttributes.dll assembly that you cna find in the \\SDK\\Obfuscation Attributes folder to mark assembly members to exclude from obfuscation, or use ExclusionPatterns to exclude members by using regular expression patterns.

If I choose to set the strings encryption mode to \"Hide\" for the assembly, is there a way for example declaratively, to encrypt a particular string with \"Encrypt\" or \"Encrypt3DES\" mode? For example, for a password or a sensitive string content?

You can choose string encryption mode to encrypt the whole string information, it is increase security of your assembly. But you can exclude some strings from encryption - by using StringCryptExclusionPatterns collection or by marking methods by speciall attribute that you can find in the NineRays.ObfuscationAttributes.dll assembly.

The unique key used to obtain the activation code uniquely identifies the machine. Is this mecanism similar to the activation of Windows XP where some changes in the hardware configuration of the machine could make the activation invalid? Example, adding or changing harddisks, network card, MAC address, etc.

Yes, this is a similiar to XP mechanism, but changing of network card, MAC-address couldn't make the activation invalid. Changing motherboard, hard disk, video card - could make activation invalid.

Spices.VSIP.Obfuscator is similar to Spices.VSIP.Net Suite except that it lacks the Decompiler, is it right or is there anything less?

Yes.

Spices.VSIP.Obfuscator is for 1 developer machine. Is it possible to use the build version (command line, or compatible with MSBuild/NAnt) on another machine in order to obfuscate code just before release by the AQ dept?

For these purposes you can buy Team license and use Spices.Net on 4-5 machines.

If I right-click on a member method and select \"Add to Excludes\", this method is added to the Excludes list that is displayed on the Properties tab.

At some point, the method that I selected as excluded, is no more striked through on the explorer tab. Looking in the Properties tab, I can check that the method is still in the Exclude list, but in the explorer tab it does not appear visually as excluded.

This is an old way to exclude member from obfuscation, seems that PropertyGrid that relects properties of current Spices.Project not yet refreshed, I could recommend you the ExclusionPatterns or marking members by NotObfuscate attribute in your code to exclude member from obfuscation.