Re: Change debug encryption on a program?

Hi, David,

As far as I know, there is no currently documented or supported way to do that (to change the "debug encryption key" after compile-time...) -- perhaps you could open an RFE for this, and then encourage people to vote for it? :-)

When you say "... delivered product ..." do you mean you want to be able to change that debug encryption key for compiled objects already installed on a customer's machine? (e.g., after the customer has installed them from the vendor provided media?) Would you want to do this as part of some "install" process, or "on demand"?

Mark S. Waterbury

> On 3/7/2018 12:27 PM, David Gibbs wrote:

On 3/7/2018 10:29 AM, Mark S Waterbury wrote:

Are you talking about the DBGENCKEY parameter on e.g. CRTRPGMOD,
CRTBNDRPG, CRTCMOD, etc.?

Exactly.

If so, then "of course" you can "change" it at "compile time" -- just
specify a different value for that parameter. ;-)

Well ... at compile time you SET it ... I'm wondering if there is a way to change it after it's been set.

When you say, "Perhaps via an API?" -- do you mean that when a user
specifies e.g., "DBGENCKEY('Garbage')" you want to change it to some
other value that you control?

No, I'm wondering if there is an API that will decrypt & re-encrypt the debug information on a program setting a new key (obviously providing the original key for decryption purposes).

My object is to be able to change the debug key on delivered product so that suitably powerful users aren't able to guess the key even if they knew it before.

david