rust-native-obf

advanced native obfuscation library for rust

features

compile time obfuscation

string encryption with pcg keystream
byte array obfuscation
wide string (utf-16) obfuscation
compile time random number generation
compile time hashing (xxhash32, sdbm)
constant value encoding with mba

runtime obfuscation

control flow obfuscation
opaque predicates
hidden function calls
obfuscated conditionals
cascade encryption
stack trashing

advanced techniques

static reference obfuscation
pointer mangling
obfuscated value storage
anti-debugging checks
tamper detection
noise generation

usage

[dependencies]

rust-native-obf = "0.1.0"

string obfuscation

use rust_native_obf::*;

let secret = obf_str!("my secret key");
let bytes = obf_bytes!(b"secret data");
let wide = obf_wide!("wide string");

compile time features

let hash = ct_xxhash!(b"data");
let random = ct_rand!(u32);
let encoded = obf_const!(42, u32);

control flow

let result = hidden_call!({
    sensitive_function()
});

obf_if!(condition, {
    do_something();
}, {
    do_else();
});

advanced obfuscation

static DATA: [u8; 4] = [1, 2, 3, 4];
let obf_ref = obf_static_ref!(&DATA);

let obf_val = ObfuscatedValue::new(123456);
let original = obf_val.get();

let encrypted = cascade_encrypt(data, 5);

anti-analysis

debug_trap!();

if !anti_debug() {
    panic!("debugger detected");
}

examples

cargo run --example basic

how it works

string obfuscation - uses pcg random number generator for keystream generation, encrypts at compile time, decrypts with volatile reads to prevent constant folding

control flow - generates unique keys for each code block based on statement content, executes in randomized order

value encoding - uses mixed boolean arithmetic (mba) with rotation and multiplication for reversible encoding

pointer obfuscation - mangles static references using xxhash-based transformation with black_box to prevent llvm optimization

compile time rng - combines file location, line number, column with xxhash mixing and siphash for deterministic randomness

anti-debug - checks for debugger presence on windows, can be extended for other platforms

technical details

no_std compatible core modules
volatile memory operations
black_box for compiler barrier
const fn for compile time execution
zero runtime overhead for constants

notes

this is obfuscation, not cryptography. designed to make reverse engineering harder, not impossible. do not use for hiding actual secrets in client binaries.

license

MIT

rust-native-obf 0.1.1