saferlove: Use encrypted and signed lua files

Showcase your libraries, tools and other projects that help your fellow love users.
Post Reply
monolifed
Party member
Posts: 188
Joined: Sat Feb 06, 2016 9:42 pm

saferlove: Use encrypted and signed lua files

Post by monolifed »

Makes lua files harder to read via encryption
License is Unlicense (public domain)
See README for more information
https://github.com/monolifed/saferlove
Last edited by monolifed on Tue Jun 08, 2021 7:30 am, edited 6 times in total.
User avatar
raidho36
Party member
Posts: 2063
Joined: Mon Jun 17, 2013 12:00 pm

Re: saferlove: Use encrypted and signed lua files

Post by raidho36 »

Now we can just point people to this project and let them obtain common wisdom the hard way.
User avatar
zorg
Party member
Posts: 3436
Joined: Thu Dec 13, 2012 2:55 pm
Location: Absurdistan, Hungary
Contact:

Re: saferlove: Use encrypted and signed lua files

Post by zorg »

raidho36 wrote: Mon Jan 27, 2020 9:30 pm Now we can just point people to this project and let them obtain common wisdom the hard way.
"Your wish is my lunch" :crazy:
https://love2d.org/forums/viewtopic.php ... 65#p223865
Me and my stuff :3True Neutral Aspirant. Why, yes, i do indeed enjoy sarcastically correcting others when they make the most blatant of spelling mistakes. No bullying or trolling the innocent tho.
monolifed
Party member
Posts: 188
Joined: Sat Feb 06, 2016 9:42 pm

Re: saferlove: Use encrypted and signed lua files

Post by monolifed »

Changed license to Unlicense (public domain)
exceptions:
toast.lua_temp (example file, part of love2d)
monocypher.c/h (it is also public domain but CC0)
User avatar
Imagic
Prole
Posts: 44
Joined: Mon Sep 30, 2019 8:20 am
Contact:

Re: saferlove: Use encrypted and signed lua files

Post by Imagic »

(probably said a lot, but still needed)

The term obfuscated is more suited; encryption implies that the information should not be understood by public ways (even if using encryption algorithms, better not fool ourselves when talking security).

I would also say that it is probably even easier for an "attacker" with this method to get the original content instead of spending time understanding bytecode or obfuscated Lua code. If a script is made to counter your library, any game using it could be deobfuscated with a single command.

Signing files can be useful, but you could create a signature for the game distribution directly (love file, etc.) and some platforms will already do that.
monolifed
Party member
Posts: 188
Joined: Sat Feb 06, 2016 9:42 pm

Re: saferlove: Use encrypted and signed lua files

Post by monolifed »

You could have read the warning section of the README first
Post Reply

Who is online

Users browsing this forum: No registered users and 52 guests