Partial ELF Encryption for Shared Library Protection

The patent divides the ELF file into multiple segments and identifies only specific critical segments (such as the program header table and certain sections) that contain shared library information. Only these identified segments are encrypted, while other segments remain unencrypted. This segmentation approach maintains security for critical information while reducing the overall encryption scope and resource consumption.

The patent applies different encryption treatments to different parts of the ELF file based on their security requirements. Critical segments containing shared library paths and symbols are encrypted with higher security measures, while non-critical segments are either encrypted with simpler methods or left unencrypted. This local quality differentiation optimizes the balance between security and performance.

The ELF file structure is segmented into identifiable sections (headers, program segments, sections). The patent specifically targets and encrypts only those segments that contain shared library dependency information, such as the program header table and dynamic section, rather than encrypting the entire file. This reduces the amount of data processed during encryption and decryption operations.

Instead of applying full encryption to the entire ELF file (excessive action), the patent applies encryption selectively to only the necessary portions that contain shared library information (partial action). This partial encryption approach provides sufficient protection for the critical information while minimizing the computational overhead and resource consumption.

The patent performs encryption of the ELF file segments during the compilation or linking phase, before the program is executed. The encrypted segments are embedded into the final executable file. This preliminary action ensures that when the program runs, the decryption and verification processes are already optimized and built-in, reducing the runtime complexity and overhead.

The ELF file is designed to contain its own encryption keys or decryption information within the file structure itself (such as in the section headers or as embedded data). When the program is executed, it can autonomously decrypt its own segments without requiring external key management systems or additional security infrastructure, thereby reducing system complexity.