pyconcrete

Protect your python script, encrypt .pyc to .pye and decrypt when import it

---

Protect python script work flow

• your_script.py import pyconcrete
• pyconcrete will hook import module
• when your script do import MODULE, pyconcrete import hook will try to find MODULE.pye first and then decrypt MODULE.pye via _pyconcrete.pyd and execute decrypted data (as .pyc content)
• encrypt & decrypt secret key record in _pyconcrete.pyd (like DLL or SO) the secret key would be hide in binary code, can't see it directly in HEX view

Encryption

• only support AES 128 bit now
• encrypt & decrypt by library OpenAES

Installation

• need to input your passphrase create secret key for encrypt python script.
• same passphrase will generate the same secret key
• installation will add pyconcrete.pth into your site-packages for execute sitecustomize.py under pyconcrete which will automatic import pyconcrete

pip

$ pip install pyconcrete

If you only execute pip install will not display any prompt(via stdout) from pyconcrete. Installation will be blocked and waiting for user input passphrase twice. You must input passphrase for installation continuously.

$ pip install pyconcrete --egg --install-option="--passphrase=<your passphrase>"

pyconcrete installed as egg, if you want to uninstall pyconcrete will need to manually delete pyconcrete.pth.

source

• get the pyconcrete source code

$ git clone <pyconcrete repo> <pyconcre dir>

• install pyconcrete

$ python setup.py install

Usage

• convert your script to *.pye

$ pyconcrete-admin.py compile --source=<your py script>  --pye
$ pyconcrete-admin.py compile --source=<your py module dir> --pye

• remove *.py *.pyc or copy *.pye to other folder

• main script

  • recommendation project layout
  • python execute main script as *.pye will cause exception, so main script can't be encrypted

main.py  # your main scirpt, must can't be encrypted
src/*.pye  # your libs

Usage (pyconcrete as lib)

• download pyconcrete source and install by setup.py

$ python setup.py install \
  --install-lib=<your project path> \
  --install-scripts=<where you want to execute pyconcrete-admin.py>

• import pyconcrete in your main script
  • recommendation project layout

main.py       # import pyconcrete and your lib
pyconcrete/*  # put pyconcrete lib in project root, keep it as original files
src/*.pye     # your libs

Test

• test all case

$ ./pyconcrete-admin.py test

• test all case, setup TEST_PYE_PERFORMANCE_COUNT env to reduce testing time

$ TEST_PYE_PERFORMANCE_COUNT=1 ./pyconcrete-admin.py test

Announcement

pyconcrete is an experimental project, there is always a way to decrypt .pye files, but pyconcrete just make it harder.