From mboxrd@z Thu Jan 1 00:00:00 1970 Received: (from weis@localhost) by pauillac.inria.fr (8.7.6/8.7.3) id SAA06086 for caml-red; Tue, 13 Jun 2000 18:50:12 +0200 (MET DST) Received: from nez-perce.inria.fr (nez-perce.inria.fr [192.93.2.78]) by pauillac.inria.fr (8.7.6/8.7.3) with ESMTP id OAA23184 for ; Tue, 13 Jun 2000 14:59:01 +0200 (MET DST) Received: from heplix4.ikp.physik.tu-darmstadt.de (heplix4.ikp.physik.tu-darmstadt.de [130.83.24.139]) by nez-perce.inria.fr (8.10.0/8.10.0) with ESMTP id e5DCx1n20489 for ; Tue, 13 Jun 2000 14:59:01 +0200 (MET DST) Received: (from ohl@localhost) by heplix4.ikp.physik.tu-darmstadt.de (8.9.3/8.9.3) id OAA23692; Tue, 13 Jun 2000 14:54:58 +0200 X-Authentication-Warning: heplix4.ikp.physik.tu-darmstadt.de: ohl set sender to ohl@heplix4.ikp.physik.tu-darmstadt.de using -f From: Thorsten Ohl Message-ID: <14662.12066.90625.170479@heplix4.ikp.physik.tu-darmstadt.de> Date: Tue, 13 Jun 2000 14:54:58 +0200 (CEST) To: caml-list@inria.fr Cc: Markus Mottl Cc: Vitaly Lugovsky Subject: Re: Signatures (was: Reverse-Engineering Bytecode) In-Reply-To: <20000612162319.A3314@miss.wu-wien.ac.at> References: <14657.9878.935831.924470@heplix4.ikp.physik.tu-darmstadt.de> <20000612162319.A3314@miss.wu-wien.ac.at> X-Mailer: VM 6.74 under Emacs 20.3.1 Reply-To: ohl@hep.tu-darmstadt.de Sender: weis > Even better would be a fixed point condition that would allow to > print a warning message: ``The sources have been modified, you can > do anything you want, but don't blame me or the results.'' Vitaly Lugovsky wrote: > But it don't need a core support from OCaml - you just can use MD5 > checksum or something like this.... I'm not so sure. I woudl liek to access a checksum of the actual sources that have been used to compile the module implementations in the currently running program, just like Dynlink does for module types. One can play games with MD5 and a `Signatures' module in the Makefile, but this is not 100%ly secure, because the code could be compiled by hand, without updating the checksums. Or am I missing something here? Cheers, -Thorsten -- Thorsten Ohl, Physics Department, TU Darmstadt -- ohl@hep.tu-darmstadt.de http://heplix.ikp.physik.tu-darmstadt.de/~ohl/ [<=== PGP public key here]