1. HAPPY HOLiDAY!
  3. Baaaaad protection! Dev hashes 100,000 times by SHA256 to check serial. Doing
  4. something like below:
  6. for (i = 0; i < 100000; i++) {
  7. hash_source = hash + serial;
  8. hash = sha256(hash_source);
  9. }
  11. The protection is inspired by u-he (algo + hardcoded hash + timebomb). We had
  12. fun time to code custom tools to calculate things, automate, patching etc.
  13. Anyway, that 100,000 times hashing does not make protection stronger :) Your
  14. "teachers" does one time Whirlpool hashing and that's still enough. SHA256
  15. should be strong enough too without hashing multiple times.