I'm making an app which simply lets users encrypt a String but only allows them to see the string after a delay of X minutes after the decrypted String is requested. I'm making this for myself so that I can't impulsively access passcodes which I use to block websites using website blocking software and I instead have to wait a certain amount of time to access the encrypted passcodes.
The problem is that I can really easily modify the source code to remove the delay. How can I make it impossible/difficult for me to modify my own code so that I can't remove the delay and am forced to wait to receive the decrypted String?
EDIT: Alright I guess it's not possible
CodePudding user response:
I mean there's not really an answer here. Is this security obfuscation so that no one can modify it, or are you just trying to make it so that its annoying enough to decompile you'll wait?
If you just want to make it cumbersome so edit. Package it into a jar and convert it into an executable where all the resources are stored inside the jar so you are less inclined to access any of it.
CodePudding user response:
Derive your encryption key with an algorithm that takes some time to calculate.
PBKDF2 (Password-Based Key Derivation Function 2) with a high iterations count could be a good candidate for this.