title: Should HASP Vendor Code be encrypted/obfuscated?
body: <p>This is in regard to SafeNet/Aladdin Sentinel HASP keys.  I've posted to their site but just in case anybody else knows the answer or would find the answer useful I'm posting here too.</p>
  
  <p>According to the docs provided by SafeNet in "Software Protection and Licensing Guid.pdf" we are supposed to keep our Vendor Code secret, right?</p>
  
  <p>Well, if I build the sample provided in "\Samples\Runtime\csharp\", then protect the app with Envelope, then decompile the Enveloped app in JetBrains dotPeek, I can see the Vendor Code string there very easily.  It appears that Envelope does not obfuscate const strings.  Or maybe it's class level strings, I don't know.</p>
  
  <p>Is this the recommended way of using the Vendor Code?  Doesn't seem very secret.  If I put the Vendor Code string into a temporary variable in a function then it gets obfuscated.  Is that the way it should be done?  If so, shouldn't the sample code reflect that?</p>
  
  <p>Thanks.</p>