Skip to main content

SOAR - Secure Obfuscated Archive Runtime (SOAR-Locker)

Project description

SOAR-Locker

Secure Obfuscated Archives Repository is a Python source-code protection and device-bound execution utility for controlled deployment environments.

SOAR-Locker converts Python source files into encrypted .soa archives. At execution time, the archive is validated against a device fingerprint and decrypted in memory through a native Rust core. The project is designed for scenarios in which Python applications must be deployed to a target machine while reducing direct source-code exposure and limiting unauthorized migration to other devices.

SOAR-Locker is an engineering protection mechanism, not a substitute for formal software licensing, hardware-backed key management, or high-assurance anti-reverse-engineering systems.

Features

  • Encrypted archive format: converts .py files into binary .soa archives.
  • Device-bound execution: archives are associated with the fingerprint of the machine on which they are generated.
  • Runtime validation: execution requires a matching runtime environment and device fingerprint.
  • In-memory decryption: decrypted source is not written back to disk during normal execution.
  • Module import support: .soa modules can be imported by other protected modules.
  • Automatic source backup: original .py files are copied to bak/ during encryption.
  • Cross-platform distribution: the Python package is pure Python, while the native Rust core is distributed as platform-specific wheels.

Supported Platforms

The Python package soar-locker supports Python 3.8 and later.

The native package soar-core is distributed through PyPI as prebuilt wheels. Current supported targets are:

  • Windows amd64
  • Linux x86_64
  • Linux aarch64

During normal execution, SOAR-Locker detects the current operating system and architecture. If the native core is missing or incompatible, it installs the matching soar-core wheel before continuing.

Installation

python -m pip install soar-locker

Manual repair is also available for diagnostics and offline wheelhouse workflows:

soar --repair-core

Inspect the runtime and core status:

soar --version

Example:

SOAR-Locker version 1.5.5
runtime target: Linux / x86_64
soar_core: installed (1.5.0, compatible)

Usage

Encrypt a single Python file:

soar script.py

This generates:

  • script.soa
  • bak/script.py

Encrypt a directory recursively:

soar ./project

Run a protected archive:

soar program.soa

Hide the warning banner for later commands:

soar --ignore-waring

The correctly spelled alias is also accepted:

soar --ignore-warning

Show the warning banner once without changing the saved preference:

soar --show-waring

Restore the default behavior:

soar --reset-waring

On Linux, if the original script uses an executable shebang workflow, the resulting archive can be executed after setting executable permissions:

chmod +x program.soa
./program.soa

Distribution Architecture

SOAR-Locker is split into two packages:

  • soar-locker: pure Python command-line interface, archive loader, packaging logic, and runtime coordination.
  • soar-core: native Rust extension that provides the core fingerprint verification and decryption primitives.

The Rust component is intentionally distributed separately because native extension modules are specific to operating system and CPU architecture. PyPI selects the correct wheel automatically from the published wheel tags.

Security Scope

SOAR-Locker is intended to raise the operational cost of casual source-code inspection and unauthorized redeployment in fixed-machine delivery contexts. It is suitable for internal tools, robotics deployments, embedded Linux systems, and controlled engineering environments.

It is not designed to provide formal resistance against determined reverse engineering, privileged attackers, memory inspection, or adversaries with full control over the runtime environment. Sensitive commercial or regulated deployments should combine SOAR-Locker with additional controls such as licensing infrastructure, hardware-backed secrets, access control, monitoring, and contractual safeguards.

Version

Current release:

soar-locker 1.5.5
soar-core   1.5.0

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

soar_locker-1.5.5.tar.gz (14.8 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

soar_locker-1.5.5-py3-none-any.whl (14.7 kB view details)

Uploaded Python 3

File details

Details for the file soar_locker-1.5.5.tar.gz.

File metadata

  • Download URL: soar_locker-1.5.5.tar.gz
  • Upload date:
  • Size: 14.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.13.2

File hashes

Hashes for soar_locker-1.5.5.tar.gz
Algorithm Hash digest
SHA256 8de32279c000e7005d6f7e93fc59efc3d046af7f38ce10fb487660d2977e659f
MD5 24701ff8e05263386eeef3da2a1031a9
BLAKE2b-256 923364c01cf672e7e24da787deeec92027e9a5e000ac02ca34ec608b5090e692

See more details on using hashes here.

File details

Details for the file soar_locker-1.5.5-py3-none-any.whl.

File metadata

  • Download URL: soar_locker-1.5.5-py3-none-any.whl
  • Upload date:
  • Size: 14.7 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.13.2

File hashes

Hashes for soar_locker-1.5.5-py3-none-any.whl
Algorithm Hash digest
SHA256 0f3b956640e1ce18b90372916a4421b1a594870d99984ca05ce60d9128e8b400
MD5 a8b91a00ad3e40176b644f9adda44977
BLAKE2b-256 24f770e72169362a847a3ba8fee3b6a2c2658887b97bea037c820f8058d30730

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page