Thanks Thanks:  0
Showing results 1 to 1 of 1

Thread: Looking to learn about FlexLM java implementation

  1. #1
    Junior Member Reputation: 10
    Join Date
    2016-09-23
    Posts
    3


    Default Looking to learn about FlexLM java implementation

    Hi Everyone, I realize FlexLM has been covered in lots of detail over the years but I have yet to see much about how it is implemented in Java software. I am studying a program that seems to use FlexLM v11.8 and integrates this into java for license checking. So far by poking around within the Java code I have found a page describing essentially what seems to be all of the keys but as integers. I'm not quite sure what to make of this because every other post I've seen says that FlexLM keys are hex values. Are these somehow encrypted or altered to reveal actual keys? Why would they just leave them in the java code for anyone to find?


    PHP Code:
        public PublicKey getPublicKey(int var1) {        switch(var1) {        
    case 
    2:            return new FlexlmPublicKey(this.getVendorName(), "6A9CC337B9374BCA558575191821E178");        
    case 
    3:            return new FlexlmPublicKey(this.getVendorName(), "699BBDFBC97626FED2110D8123A745D40726B81F8E50");        
    case 
    4:            return new FlexlmPublicKey(this.getVendorName(), "69A453995298D336BCCF171628BF370D22F9B3AAD6B2727BB8B6EE8E9D35F3");        default:            return null;        }    }
        public 
    int[] getEncryptionSeeds() {        return new int[]{1972929057950878048};    }
        public 
    int[] getVendorKeys() {        return new int[]{1815459978430783147908197588, -765277164};    }
        public 
    int[] getCroKeys() {        return new int[]{-1358199285938978997};    }
        public 
    int getDefaultStrength() {        return 4;    } 
    A crack I've seen for the previous version of this software replaced the last public key with their own known public key to allow a keygen packaged with the release to generate valid licenses. I dont believe that strategy works any longer because now as soon as you enter a license key and ask to activate the software will attempt to connect to the publisher to verify the information. Does this mean they are running the daemon that i'd like to extract the real keys from remotely?

    Thanks for any and all insights you guys might have.

  2. # ADS
    Circuit advertisement
    Join Date
    Always
    Posts
    Many
     

Tags for this Thread

Bookmarks

Bookmarks

Posting Rules

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •