1. A system for provisioning a protected instance of a software application, the system comprising: a source of entropy; one or more processors; and one or more memories operatively coupled to at least one of the one or more processors and having instructions stored thereon that, when executed by at least one of the one or more processors, cause the at least one or more processors to: generate a secret based on the source of entropy; generate a protected instance of the software application by binding the secret to one or more portions of the software application; and communicate the secret value to a trusted signing authority; wherein the protected instance of the software application is arranged to use a property dependent transform equivalency context comprising one or more operations, wherein the outcome of the one or more operations are dependent on an equivalency of (a) a message signature generated by the trusted signing authority using the secret value and a challenge message directed to both the trusted signing authority and to the protected instance of the software application, and (b) the challenge message.