Research On Non-invasive Real-time Encryption And Decryption Method Of Executable Program

This paper designs an encryption and decryption scheme which needs to bind the target software to the authorized hardware under specific circumstances.The scheme is divided into encryption system and decryption loading system.The scheme is verified under Linux and Windows platforms.The main tasks are as follows:(1)Introduce the main executable file types in Linux-ELF executable file and its loading process;Introduce the main executable file type-PE executable file under Windows and its loading process.(2)The information storage structure is designed in the encryption system,which is used to store the bound hardware information and subsequent verification.Two encryption strategies are designed for executable file formats under different platforms: ELF file format only encrypts the contents of the file behind the ELF header table by binding;The PE file format binds and encrypts all the contents of the file.After encryption is completed,the information storage structure is written to the contents of the encrypted file before.(3)In the decryption and loading system,a preloader in the user state is designed to load the decrypted contents of the target file to the correct memory address and run correctly.The scheme solves the problem that the plaintext of the target software is generated in the storage medium when the decryption is performed,and improves the safety of the software.(4)When verifying the scheme,the encryption system under Windows supports the hardware-bound encryption of PE file format and ELF file format,and the decryption loading system supports the decryption of the encrypted PE file format and the loading and running of the encrypted PE file format;Under Linux,the encryption system supports hardware-bound encryption of ELF file format,and the decryption loading system supports decrypting the encrypted ELF file format and loading and running.The encryption and decryption scheme designed in this paper provides a solution and reference for hardware binding scenarios under specific circumstances.The scheme solves the problem of authorization and distribution of the target software,and prevents the software from spreading in large quantities without authorization.