Re: Win32 DLL Signing

来源:互联网 发布:qq飞车卡车软件 编辑:程序博客网 时间:2024/05/17 10:06

// from http://coding.derkeiler.com/Archive/Delphi/borland.public.delphi.thirdpartytools.general/2007-07/msg00082.html

Then you really need to use Authenticode signatures. One will be able to check the signature in Windows Explorer as well as in code. It's just self-verification that makes no sense (the one that removed the signature can as well patch the code to not check it).

You need to understand, that signing was designed mainly to certify the authenticity of the code, not to prevent changes in the code. It might be necessary to use some additional tool (previously we recommended ASProtect, but now they seem to have problems with serving customers) to encrypt the sensitive parts of code including the parts that perform signature verification.