In one of my .NET apps I must “validate” my program to a library with a license key.
But everyone who peeks into my assemblies can get the key…
This does not affect me but I do care about the creator(s) of the library.
I don’t wish to “leak” his/their keys and cause him/them losses like this…
Is there any free tool that I can use to protect my data?
I really do not care about the other code… The key is important.
If you have to pass it into the library and if you don’t control the library, then you can’t do much anyway. You can obfuscate your code all you like to thwart Reflector users (but not Reflector VSPro, at least not easily) and I’ll just use Crack.NET to peek into the memory and grab it from there.
It would have been the job of the library creator to give a secure mechanism, e.g. using public/private keys, SecureString, DPAPI or requiring a web call to store the key on the server.