Using Unmanaged Code as Obfuscation Technique

[Abugov]

Hello,

I am new to C++/CLI and I have an old piece of C++ code that works with the CryptoAPI.

In this code I create a container using a "container name". The container name is a string that is used as a key to the whole encryption algorithm, and must be kept safe.

I've created a "C++/CLI Class Library" project and moved the C++ code into it and successfully built an assembly.

My question is:
Is it possible for a hacker to access the metadata of the assembly and recover the "container name"?

10x,
Alex

[fritzone]

Yes, I think it's possible using Lutz Roeder's Reflector. You can download it and check if it revelase this too.

[Abugov]

10x for your answer!
I've inspected the assembly quite a bit with the Relector and couldn’t find a way to see the value of the “container name” string.
I’ve also written some code that tries to retrieve the value using reflection and couldn’t make it.
The thing is - I have to be sure.
Does anyone know how is unmanaged code "stored" inside a C++/CLI assembly?
Does it have any metadata? or is it stored as a straight byte code?