Skip to main content

pyconcrete

Travis AppVeyor PyPI Version PyPI PyVersion PyPI License

Protect your python script, encrypt .pyc to .pye and decrypt when import it


Protect python script work flow

  • your_script.py import pyconcrete

  • pyconcrete will hook import module

  • when your script do import MODULE, pyconcrete import hook will try to find MODULE.pye first and then decrypt MODULE.pye via _pyconcrete.pyd and execute decrypted data (as .pyc content)

  • encrypt & decrypt secret key record in _pyconcrete.pyd (like DLL or SO) the secret key would be hide in binary code, can’t see it directly in HEX view

Encryption

  • only support AES 128 bit now

  • encrypt & decrypt by library OpenAES

Installation

  • need to input your passphrase create secret key for encrypt python script.

  • same passphrase will generate the same secret key

  • installation will add pyconcrete.pth into your site-packages for execute sitecustomize.py under pyconcrete which will automatic import pyconcrete

pip

$ pip install pyconcrete

If you only execute pip install will not display any prompt(via stdout) from pyconcrete. Installation will be blocked and waiting for user input passphrase twice. You must input passphrase for installation continuously.

$ PASSPHRASE=YOUR_PASSPHRASE_HERE pip install pyconcrete

or, if you use an old pip version that supports –egg:

$ pip install pyconcrete --egg --install-option="--passphrase=<your passphrase>"

pyconcrete installed as egg, if you want to uninstall pyconcrete will need to manually delete pyconcrete.pth.

source

  • get the pyconcrete source code

$ git clone <pyconcrete repo> <pyconcre dir>
  • install pyconcrete

$ python setup.py install

Usage

Full encrypted

  • convert all of your .py to *.pye

$ pyconcrete-admin.py compile --source=<your py script>  --pye
$ pyconcrete-admin.py compile --source=<your py module dir> --pye
  • remove *.py *.pyc or copy *.pye to other folder

  • main.py encrypted as main.pye, it can’t be executed by normal python. You must use pyconcrete to process the main.pye script. pyconcrete(exe) will be installed in your system path (ex: /usr/local/bin)

pyconcrete main.pye
src/*.pye  # your libs

Partial encrypted (pyconcrete as lib)

  • download pyconcrete source and install by setup.py

$ python setup.py install \
  --install-lib=<your project path> \
  --install-scripts=<where you want to execute pyconcrete-admin.py and pyconcrete(exe)>
  • import pyconcrete in your main script

    • recommendation project layout

    main.py       # import pyconcrete and your lib
    pyconcrete/*  # put pyconcrete lib in project root, keep it as original files
    src/*.pye     # your libs

Test

  • test in local

$ ./pyconcrete-admin.py test
  • test in docker environment

$ ./bin/run-test.sh
  • add test case for pyconcrete.exe

    • reference exists test case

    • add folder in test/exe_testcases/

    • add testing code at test/exe_testcases/src/main.py

    • add validator at test/exe_testcases/validator.py

Example

Django with pyconcrete

Building on Linux

Python 3.7 - fix Ubuntu 14.04 build error

x86_64-linux-gnu-gcc: error: unrecognized command line option `-fstack-protector-strong`

Reference by Stackoverflow solution * you should install gcc-4.9 first * symlink /usr/bin/x86_64-linux-gnu-gcc to gcc-4.9 * build pycocnrete again * rollback symlink

Building on Windows

Python 2.7 - Visual Studio 2008

https://www.microsoft.com/en-us/download/details.aspx?id=44266

  • Open VS2008 Command Prompt

  • set DISTUTILS_USE_SDK=1

  • set SET MSSdk=1

  • create distutils.cfg and put inside text [build] compiler=msvc

Python 3.5, 3.6, 3.7 - Visual Studio 2015

MSVC 2015 Build Tools

Document

  • make sure setuptools >= 24.0 sh python -c 'import setuptools; print(setuptools.__version__)'

  • Open VS2015 Build Tools Command Prompt

  • set DISTUTILS_USE_SDK=1

  • setenv /x64 /release or setenv /x86 /release

Reference

https://matthew-brett.github.io/pydagogue/python_msvc.html https://github.com/cython/cython/wiki/CythonExtensionsOnWindows

Announcement

pyconcrete is an experimental project, there is always a way to decrypt .pye files, but pyconcrete just make it harder.

Metadata

Release files for pyconcrete 0.14.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for pyconcrete 0.14.1
File Size Uploaded
pyconcrete-0.14.1.tar.gz 49.3 kB Details

Release files / pyconcrete-0.14.1.tar.gz

Download URL pyconcrete-0.14.1.tar.gz
Size 49.3 kB
Tags Source
SHA-256 checksum
How to use checksums
11a81ddf732ea856e0ef087607388ac39c53d6b1597b328cff5c28ba0f095e3d
BLAKE2b-256 checksum
How to use checksums
d7e89ac187de808e39a637a942258e8b0d65af4f0aa426ba65028695a98c65bf
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/3.8.0 pkginfo/1.8.2 readme-renderer/32.0 requests/2.27.1 requests-toolbelt/0.9.1 urllib3/1.26.8 tqdm/4.62.3 importlib-metadata/4.8.3 keyring/23.4.1 rfc3986/1.5.0 colorama/0.4.4 CPython/3.6.8

Release history Release notifications | RSS feed

1.3.0

1 release file

1.2.0

1 release file

1.1.0

1 release file

1.0.0

1 release file

0.15.2

1 release file

0.15.1

1 release file

This release

0.14.1 This release

1 release file

0.12.1

1 release file

0.11.3

1 release file

0.11.1

1 release file

0.11.0

1 release file

0.10.2

1 release file

0.10.1

1 release file

0.10.0

1 release file

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page