>>>>I realize this thread is old but cycling back to it after a few months. The client wanted to go after the "low hanging fruit" and assume that if there were a data breach, the bad-actors either would just be interested in data that was easy to get at or perhaps they were 3rd level hackers who would not know the steps to go through to get the keys out of memory.
>>>>
>>>>Some follow up questions:
>>>>- how easy is it to set up Refox? Is it sort of just a black box where you point to the project and create a new .exe that has some protections built in?
>>>>- can someone relatively easily still get the keys out of memory for Refox? I use record specific keys (combined with a key in a config table and a key in a .vcx object) to create a unique key per record. Would this make it really hard or not worth it even if they could get the key for one record?
>>>>- currently using an external routine to encrypt - does this mean the key can be plucked out of memory each time that call is made?
>>>>- and if someone has to use a debugger, don't they need to sit and check each line of code to see when an decryption call is made?
>>>>
>>>>Thanks,
>>>>Albert
>>>
>>>I've used Refox to get source code from an EXE, but not to encrypt, but my understanding is that it's about code, not data. In the past, I used Cryptor to encrypt data, but I was never able to get it working on my Win7 machine, so I can't recommend that.
>>>
>>>Have you looked at Craig Boyd's encryption library?
>>>
>>>Tamar
>>
>>I use Cipher function written by Sergey Berezniker. And Viv helped me to "translate" it to C# so I use it in my ASP.NET application too.
>
>
>How does Cipher work?
>
>
>I just tried going to berezniker.com and couldn't. Where could I get Cipher and the documentation that goes with it?
>
>
>By the way anyone knows what's happening with Sergey? I'm not here as often as I used to be, but to me it looks like Sergey stopped completely coming here in a matter of days.

Hi Denis,

Here is an example of how Cipher function works:

cEncodedString = cipher( cPlainString, "YourSecretKey" )

Basically, as you see above it will encrypt a string and then you can store it in your database or whatever. I use this to store the user license in an XML file. And then read it at run-time and validate is the user has support.

If you would like, send me your email (you can send it via PM) and I will email you the code. I don't know what happened to Sergey; maybe he just got tired of us.