pyconcrete 0.10.2

Protect python script work flow

• your_script.py import pyconcrete

• pyconcrete will hook import module

• when your script do import MODULE, pyconcrete import hook will try to find MODULE.pye first and then decrypt MODULE.pye via _pyconcrete.pyd and execute decrypted data (as .pyc content)

• encrypt & decrypt secret key record in _pyconcrete.pyd (like DLL or SO) the secret key would be hide in binary code, can’t see it directly in HEX view

Encryption

• only support AES 128 bit now

• encrypt & decrypt by library OpenAES

Installation

• need to input your passphrase create secret key for encrypt python script.

• same passphrase will generate the same secret key

• installation will add pyconcrete.pth into your site-packages for execute sitecustomize.py under pyconcrete which will automatic import pyconcrete

$ pip install pyconcrete

``pip install`` will not display any prompt(via stdout) from
pyconcrete. Installation will be ``blocked`` and
``waiting for user input passphrase twice``. You must input
passphrase for installation continuously. Hard to control pip to
redirect pyconcrete stdout to console currently.

Usage

• convert your script to *.pye

  $ pyconcrete-admin.py compile --source=<your py script>  --pye
  $ pyconcrete-admin.py compile --source=<your py module dir> --pye

• remove *.py *.pyc or copy *.pye to other folder

• main script

• recommendation project layout

• python execute main script as *.pye will cause exception, so main script can’t be encrypted

  main.py  # your main scirpt, must can't be encrypted
  src/*.pye  # your libs

Usage (pyconcrete as lib)

• download pyconcrete source and install by setup.py

  $ python setup.py install \
    --install-lib=<your project path> \
    --install-scripts=<where you want to execute pyconcrete-admin.py>

• import pyconcrete in your main script

• recommendation project layout

  main.py       # import pyconcrete and your lib
  pyconcrete/*  # put pyconcrete lib in project root, keep it as original files
  src/*.pye     # your libs

Test

• test all case

  $ ./pyconcrete-admin.py test

• test all case, setup TEST_PYE_PERFORMANCE_COUNT env to reduce testing time

  $ TEST_PYE_PERFORMANCE_COUNT=1 ./pyconcrete-admin.py test

Announcement

pyconcrete is an experimental project, there is always a way to decrypt .pye files, but pyconcrete just make it harder.