saferlove: Use encrypted and signed lua files

Showcase your libraries, tools and other projects that help your fellow love users.
Post Reply
ingsoc451
Party member
Posts: 119
Joined: Sat Feb 06, 2016 9:42 pm

saferlove: Use encrypted and signed lua files

Post by ingsoc451 » Mon Jan 27, 2020 9:18 pm

Makes lua files harder to read via encryption
License is Unlicense (public domain)
See README for more information
Attachments
saferlove-publicdomain.zip
(67.78 KiB) Downloaded 48 times
Last edited by ingsoc451 on Mon Apr 20, 2020 11:11 am, edited 3 times in total.

User avatar
raidho36
Party member
Posts: 2063
Joined: Mon Jun 17, 2013 12:00 pm

Re: saferlove: Use encrypted and signed lua files

Post by raidho36 » Mon Jan 27, 2020 9:30 pm

Now we can just point people to this project and let them obtain common wisdom the hard way.

User avatar
zorg
Party member
Posts: 2863
Joined: Thu Dec 13, 2012 2:55 pm
Location: Absurdistan, Hungary
Contact:

Re: saferlove: Use encrypted and signed lua files

Post by zorg » Mon Jan 27, 2020 9:38 pm

raidho36 wrote:
Mon Jan 27, 2020 9:30 pm
Now we can just point people to this project and let them obtain common wisdom the hard way.
"Your wish is my lunch" :crazy:
https://love2d.org/forums/viewtopic.php ... 65#p223865
Me and my stuff :3True Neutral Aspirant. Why, yes, i do indeed enjoy sarcastically correcting others when they make the most blatant of spelling mistakes. No bullying or trolling the innocent tho.

ingsoc451
Party member
Posts: 119
Joined: Sat Feb 06, 2016 9:42 pm

Re: saferlove: Use encrypted and signed lua files

Post by ingsoc451 » Mon Apr 20, 2020 11:20 am

Changed license to Unlicense (public domain)
exceptions:
toast.lua_temp (example file, part of love2d)
monocypher.c/h (it is also public domain but CC0)

User avatar
Imagic
Prole
Posts: 28
Joined: Mon Sep 30, 2019 8:20 am

Re: saferlove: Use encrypted and signed lua files

Post by Imagic » Mon Apr 20, 2020 1:08 pm

(probably said a lot, but still needed)

The term obfuscated is more suited; encryption implies that the information should not be understood by public ways (even if using encryption algorithms, better not fool ourselves when talking security).

I would also say that it is probably even easier for an "attacker" with this method to get the original content instead of spending time understanding bytecode or obfuscated Lua code. If a script is made to counter your library, any game using it could be deobfuscated with a single command.

Signing files can be useful, but you could create a signature for the game distribution directly (love file, etc.) and some platforms will already do that.

ingsoc451
Party member
Posts: 119
Joined: Sat Feb 06, 2016 9:42 pm

Re: saferlove: Use encrypted and signed lua files

Post by ingsoc451 » Thu Apr 30, 2020 10:22 pm

You could have read the warning section of the README first

Post Reply

Who is online

Users browsing this forum: No registered users and 7 guests