From c52fa9042ba031d91d133c5d741f93bb7dbbc897 Mon Sep 17 00:00:00 2001 From: walon Date: Wed, 3 Jul 2024 11:49:29 +0800 Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=E6=96=87=E6=A1=A3=EF=BC=8C?= =?UTF-8?q?=E6=94=AF=E6=8C=81global-metadata.dat=E5=8A=A0=E5=AF=86?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- docs/business/basicencryption.md | 9 +++++++-- docs/business/intro.md | 1 + .../current/business/basicencryption.md | 2 ++ .../current/business/intro.md | 1 + 4 files changed, 11 insertions(+), 2 deletions(-) diff --git a/docs/business/basicencryption.md b/docs/business/basicencryption.md index 4c400658..fbb1f393 100644 --- a/docs/business/basicencryption.md +++ b/docs/business/basicencryption.md @@ -8,6 +8,7 @@ |技术|安全指数|已经实现| |-|-|-| +|global-metadatata.dat加密|:star:|✔| |元数据混淆|:star::star:|✔| |元数据加密|:star::star::star::star:|✔| |结构虚拟化|:star::star::star:|✔| @@ -15,6 +16,10 @@ |延迟解密|:star::star::star:|✔| |指令虚拟化|:star::star::star::star::star:|| +## global-metadatata.dat加密 + +对global-metadata.dat进行加密，阻止恶意第三方还原出元数据信息。 + ## 元数据混淆 由于clr自身机制原因，无论作了多复杂的加密，在内存中必然可以通过反射获得类型、字段、函数名等等有效的元数据信息。 @@ -104,6 +109,7 @@ method body中保存了函数体元数据信息。 |参数名|加密dll时需要与主包一致|描述| |-|-|-| +|encryptGlobalMetdataDat||加密global-metadata.dat文件| |vmSeed|是|加密虚拟机的随机化种子| |metadataSeed|否|元数据的随机化加密种子| |key|否|加解密时所用的加密参数| @@ -120,8 +126,7 @@ vmSeed是加密虚拟机的随机化种子。这个随机会种子会影响生 metadtaSeed和key为均为动态参数，不需要与主包一致。每次加密热更新dll都可以修改此值。推荐每经过一段时间或者经过几个版本后修改这些值。 -xxEncCodeLength为加密指令的长度，值越大则加密越复杂，解密耗时与加密指令长度成正比关系。由于解密过程会带来一定的开销，建议取默认值即可。如果 -加载加密的热更新程序集的时间过长，可以适当减少这些值。 +xxEncCodeLength为加密指令的长度，值越大则加密越复杂，解密耗时与加密指令长度成正比关系。由于解密过程会带来一定的开销，建议取默认值即可。如果加载加密的热更新程序集的时间过长，可以适当减少这些值。 ## 加密热更新dll diff --git a/docs/business/intro.md b/docs/business/intro.md index 9927837e..178294cc 100644 --- a/docs/business/intro.md +++ b/docs/business/intro.md @@ -29,6 +29,7 @@ |[元数据优化](./metadataoptimization.md)||✔|✔|✔| |[标准解释性能优化](./basicoptimization)||✔|✔|✔| |[离线指令优化](./advancedoptimization)||✔|✔|✔| +|global-metadata.dat加密||✔|✔|✔| |[代码加固](./basicencryption)||✔|✔|✔| |[热重载](./reload/hotreloadassembly)||||✔| |[访问控制机制](./accesspolicy)||||✔| diff --git a/i18n/en/docusaurus-plugin-content-docs/current/business/basicencryption.md b/i18n/en/docusaurus-plugin-content-docs/current/business/basicencryption.md index d4f3cd21..8be674ce 100644 --- a/i18n/en/docusaurus-plugin-content-docs/current/business/basicencryption.md +++ b/i18n/en/docusaurus-plugin-content-docs/current/business/basicencryption.md @@ -8,6 +8,7 @@ We provide the industry's top managed code hardening technology, which effective |Technology|Safety Index|Achieved| |-|-|-| +|global-metadatata.dat encryption|:star:|✔| |Metadata obfuscation|:star::star:|✔| |Metadata encryption|:star::star::star::star:|✔| |Structure Virtualization|:star::star::star:|✔| @@ -26,6 +27,7 @@ Because instruction obfuscation will significantly harm performance, only pure i |Technology|Structure Virtualization|Encryption Virtualization|Lazy Decryption|Security Index| |-|-|-|-|-| +|encryptGlobalMetdataDat||Encrypt global-metadata.dat file| |Customized dll file structure||||:star:| |~string stream encryption||✔||:star::star:| |~blob stream encryption||✔||:star::star:| diff --git a/i18n/en/docusaurus-plugin-content-docs/current/business/intro.md b/i18n/en/docusaurus-plugin-content-docs/current/business/intro.md index a7218e6a..786ea7bb 100644 --- a/i18n/en/docusaurus-plugin-content-docs/current/business/intro.md +++ b/i18n/en/docusaurus-plugin-content-docs/current/business/intro.md @@ -29,6 +29,7 @@ Currently, there are three commercial versions, with specific feature comparison | [Standard Interpretation Performance Optimization](./basicoptimization) | | ✔ | ✔ | ✔ | | [Offline Instruction Optimization](./advancedoptimization) | | ✔ | ✔ | ✔ | | [Code Encryption](./basicencryption) | | ✔ | ✔ | ✔ | +|global-metadata.dat encryption||✔|✔|✔| | [Hot Reload](./reload/hotreloadassembly) | | | | ✔ | | [Access Control Mechanism](./accesspolicy) | | | | ✔ | | [**DHE Technology**](./differentialhybridexecution) | | | ✔ | |