Method of encryption and decryption for shared library in open operating system

Patent metadata

Field	Value
Publication number	US-9256756-B2
Application number	US-201414188448-A
Country	US
Kind code	B2
Filing date	Feb 24, 2014
Priority date	Dec 31, 2013
Publication date	Feb 9, 2016
Grant date	Feb 9, 2016

Abstract

A method of encryption and decryption for shared libraries in an open operating system is provided. By encrypting a partial portion of an executable and linkable format (ELF) file, where the ELF file is dependent on the shared libraries, an operating system lacking a secret key is not able to use the encrypted ELF file and thus not able to load the shared libraries into the memory for execution, thereby ensuring the protection of the shared libraries.

First claim

What is claimed is:

1. A method of encryption for shared libraries in an open operating system, wherein said shared libraries are dependent libraries, said method of encryption performed by the operating system of a computer comprising:
providing, by the computer, an executable and linkable format (ELF) file that is dependent on the dependent libraries, said ELF file including an ELF header, at least one program header table and at least one segment, wherein said ELF header includes an identification segment and at least a portion, and said identification segment includes a magic number; and
encrypting, by the computer, the portion of said ELF header excluding said identification segment and further encrypting said at least one program header table.

2. The method of encryption as of claim 1 , further comprising:
modifying said identification segment so as to generate an updated identification segment.

3. The method of encryption as of claim 1 , wherein said at least one segment includes a dynamic segment (PT_DYNAMIC).

4. The method of encryption as of claim 3 , further comprising:
encrypting said dynamic segment (PT_DYNAMIC).

5. The method of encryption as of claim 1 , further comprising the steps of:
generating a random number; and
encrypting partial portions of said ELF header and said at least one program header table through said random number.

6. The method of encryption as of 5 , further comprising the steps of:
providing a string password;
performing a hash operation on said string password so as to generate a hash number; and
encrypting said random number through said hash number so as to generate an encrypted random number.

7. The method of encryption as of claim 6 , further comprising:
storing said hash number in a hardware-based security engine.

8. A method of decryption for shared libraries in an open operating system, said method of decryption performed by the operating system of a computer comprising the steps of:
determining, by the computer, that a program to be executed is an encrypted executable and linkable format (ELF) file, where a portion of an ELF header of the ELF file excluding an identification segment is encrypted, and at least one program header table of the said ELF file is encrypted, wherein the identification segment includes a magic number;
decrypting, by the computer, the encrypted ELF file through a random number; and restoring, by the computer, the encrypted ELF file to an ELF file that is decrypted.

9. The method of decryption as of claim 8 , further comprising:
decrypting an encrypted random number through a hash number so as to generate said random number.

10. The method of decryption as of claim 8 , further comprising the steps of:
transmitting an encrypted random number and the encrypted ELF file to a hardware-based security engine;
decrypting said encrypted random number through a hash number stored in said hardware-based security engine so as to generate said random number; and
returning said ELF file that is decrypted.

Assignees

• Giga Byte Tech Co Ltd

Inventors

• Lin Wei-Cheng

Classifications

• G06F21/6209 Primary

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title