[Python-ideas] I have an encrypted python module format: .pye

[Jakob Bowyer]

http://chargen.matasano.com/chargen/2009/7/22/if-youre-typing-the-letters-a-e-s-into-your-code-youre-doing.html

On Sat, May 12, 2012 at 2:11 PM, Tim Delaney
<timothy.c.delaney at gmail.com> wrote:
> On 12 May 2012 08:27, li wang <charlesw123456 at gmail.com> wrote:
>>
>> When a .pye is imported, python will check the environment variable
>> PYTHONENCRYPT, if this environment variable is defined with non-blank
>> value, the value is used to generate AES key and CBC initialize vector
>> which will be used to encrypt .py and decrypt .pye.
>
>
> As others have noted, this is essentially useless for protecting your code.
> How do you set that environment variable on your customer's system, without
> giving them the key they need?
>
> You can erect a somewhat higher barrier by using Pyrex or Cython to compile
> your modules to .pyd/.so. It's still quite possible to extract your logic
> and/or patch around things, but it's a little harder.
>
> The only reasonably secure method (again, as noted by others) is to not have
> your code on the client machine e.g. using a web service for the critical
> logic.
>
> Tim Delaney
>
> _______________________________________________
> Python-ideas mailing list
> Python-ideas at python.org
> http://mail.python.org/mailman/listinfo/python-ideas
>