Skip to content

Commit

Permalink
The GSM package [ver. 0.22.0]
Browse files Browse the repository at this point in the history
## The GSM package [ver. 0.22.0]

- [Article](https://www.wuss.org/proceedings/2023/WUSS-2023-Paper-189.pdf) explaining details of "macro hiding" added as an additional content to the package.
  • Loading branch information
yabwon committed Nov 7, 2023
1 parent a670b09 commit 27abf39
Show file tree
Hide file tree
Showing 5 changed files with 345 additions and 5 deletions.
4 changes: 2 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,10 +8,10 @@ to create secured macros stored in SAS Proc FCMP functions.
The dataset with functions can be shared between different operating systems
and allows to generate macros on site without showing their code.

SHA256 digest for the latest version of `GSM`: F*2FECDDB568B38E206CA4ADA6FDEF5209C0A08B99401A1510D777BABF9DA54682
SHA256 digest for the latest version of `GSM`: F*8D80AEB2DB7A4531BA124240E7A12EBE717293048561A877EB5B6B039BD11D18

[**Documentation for GSM**](./gsm.md "Documentation for GSM")

[Article describing the idea](https://www.wuss.org/wuss-2023-conference-proceedings/ "Article about the idea GSM")
[Article describing the idea](https://www.wuss.org/proceedings/2023/WUSS-2023-Paper-189.pdf/ "Article about the idea GSM")

To work with a package use the [**SAS Packages Framework**](https://github.com/yabwon/SAS_PACKAGES/blob/main/README.md "SPFinit").
10 changes: 7 additions & 3 deletions gsm.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@
---


# The GSM package [ver. 0.21.1] <a name="gsm-package"></a> ###############################################
# The GSM package [ver. 0.22.0] <a name="gsm-package"></a> ###############################################

The **GSM** (a.k.a. *Generate Secure Macros*) package allows
to create secured macros stored in SAS Proc FCMP functions.
Expand Down Expand Up @@ -94,10 +94,14 @@ Package contains:
Required SAS Components:
`Base SAS Software`

*SAS package generated by generatePackage, version 20230905*
Package contains additional content, run: %loadPackageAddCnt(GSM) to load it
or look for the gsm_AdditionalContent directory in the Packages fileref
localization (only if additional content was deployed during the installation process).

*SAS package generated by generatePackage, version 20231107*

The SHA256 hash digest for package GSM:
`F*2FECDDB568B38E206CA4ADA6FDEF5209C0A08B99401A1510D777BABF9DA54682`
`F*8D80AEB2DB7A4531BA124240E7A12EBE717293048561A877EB5B6B039BD11D18`


## >>> `%GSM()` macro: <<< <a name="gsm-macro"></a> #######################
Expand Down
Binary file modified gsm.zip
Binary file not shown.
336 changes: 336 additions & 0 deletions hist/0.22.0/gsm.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,336 @@
- [The GSM package](#gsm-package)
- [Content description](#content-description)
* [`%GSM()` macro](#gsm-macro)
* [`%GSMpck_makeFCMPcode()` macro](#gsmpck-makefcmpcode-macro)

* [License](#license)

---


# The GSM package [ver. 0.22.0] <a name="gsm-package"></a> ###############################################

The **GSM** (a.k.a. *Generate Secure Macros*) package allows
to create secured macros stored in SAS Proc FCMP functions.
The dataset with functions can be shared and allows to generate
macros without showing their code.

The GSM package is basically an automated version of the following:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~sas
proc fcmp outlib = work.gsm.secure ENCRYPT;
function generateMacro() $;
rc = RESOLVE('
%macro secretMacro(x) / SECURE;
data test;
a = "&x.";
run;
%mend;
');
return (rc);
endsub;
run;
/* share work.gsm dataset */
options cmplib = work.gsm;
data _null_;
rc = generateMacro();
put rc=;
run;
/* enjoy */
%secretMacro(42)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
See examples for more details.

[Recording of presentation with "how it works" description (in Polish)](https://www.youtube.com/watch?v=LtaWPe2sgRY&t=1s "YouTube").

[The WUSS 2023 Conference article describing the idea](https://www.wuss.org/wuss-2023-conference-proceedings/ "Article about the idea GSM")


*How to use it:*
- Copy all files with your secured macros code into a directory.
Best approach is to have one file for one macro.
- Copy a path to the directory.
- Run the following code:
```
%GSM(<the path to directory>, cmplib=<name of the dataset>)
```
- Share generated `ZIP` file (unzip and run the code).

**Limitations:**
- Single macro file cannot be longer than 32760 bytes.

- Multiline text variable. Consider the following code text file:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
%macro~test()/SECURE;~#@
data~test;~#@
a~=~"abc~#@
~#@
def";~#@
put~a~hex20.;~#@
run;~#@
%mend~test;~#@
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
where `~` symbols the space character,
`#` symbols the carriage return (`0D`),
and `@` symbols the line feed (`0A`).
The code file is scanned and inserted into
the `resolve()` function argument in a "byte by byte"
fashion hence also the "end of line" characters are included.
As the result value of variable `a` will be:

`a = "abc~#@~#@def"`.

If you want to use the `GSM` package avoid
such "style" of coding in your macros.


---

Package contains:
1. macro gsm
2. macro gsmpck_makefcmpcode

Required SAS Components:
`Base SAS Software`

Package contains additional content, run: %loadPackageAddCnt(GSM) to load it
or look for the gsm_AdditionalContent directory in the Packages fileref
localization (only if additional content was deployed during the installation process).

*SAS package generated by generatePackage, version 20231107*

The SHA256 hash digest for package GSM:
`F*8D80AEB2DB7A4531BA124240E7A12EBE717293048561A877EB5B6B039BD11D18`


## >>> `%GSM()` macro: <<< <a name="gsm-macro"></a> #######################

The `%GSM()` macro is the main macro of
the **GSM** (a.k.a. *Generate Secure Macros*) package.

It converts a list of macros provided by the user into
a data set of the Proc FCMP functions. The macros are stored
in functions are encrypted which allow to share them without
showing their code. *Important* thing is that macros provided
by the user *has* to be "secure", i.e. the `secure` option has to
be added to the macro definition. See the example:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~sas
%macro secretMacro(x) / SECURE; /* <- the secure option */
<... some code ...>
%mend secretMacro;
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


As a result a zip file, containing dataset with functions and
code to be executed on site, is generated.

Since encrypted code is stored in a SAS dataset it has
no limitation in sharing between operating systems (like catalogs have).

*Limitation:* Due to the `Resolve()` function limitations
a single macro file cannot be longer than 32760 bytes.

*Notes:*
- All macros have to have the `secure` option added, i.e. `%macro aMacroname(...) / SECURE ;`.
- During the execution a test macro, named `%GSMpck_dummyMacroForTests()`, is generated.
- The `%GSM()` macro calls the `%GSMpck_makeFCMPcode(...)` macro internally.

### SYNTAX: ###################################################################

The basic syntax is the following, the `<...>` means optional parameters:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~sas
%GSM(
path
<,trim=0>
<,cmplib=work.generateMacros>
<,source2=>
<,outpath=>
<,encodingRestricted=>
<,secret=>
<,lineEnd=>
<,encrypt=>
)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

**Arguments description**:

1. `path` - *Required*, indicates a directory which contains files with macros.
Only files with `sas` extension are used.

* `cmplib=` - *Optional*, the default value is `work.generateMacros`.
Names the dataset which will contain generated functions.

* `source2=` - *Optional*, the default value is null.
Indicate if `%includ`-ed files are printed out.
Any value other than null enables printing.

* `outpath=` - *Optional*, the default value is set the same as the `path`.
Points a directory in which a result (a zip file) is generated.

* `encodingRestricted=` - *Optional*, the default value is `0`.
If set to 1 then if User session encoding is different from
encoding of the session which generates the dataset then
the generateMacros() function will not execute macro code.

* `secret=` - *Optional*, the default value is null, in such case the
secret is generated from the `sha256(datetime(), hex32.)` function
and is printed in the log. When not null then should be
alphanumerical constant. Non-alphanumerical characters are removed.
Required to execute the `resolve()` function.
User who do not know the value will not be able
to run the `_maxro_XX_()` function.

* `lineEnd=` - *Optional*, the default value is `0D0A`, indicates which of:
line feed, carriage return, or both, or a space be inserted
at the end of line in the intermediate code file that is generated.
Value has to be hexadecimal code (_NOT_ null),
since the value is resolved as `"&lineEnd."x`, so use e.g.
`0A` for line feed, `0D` for carriage return,
`0D0A` for both, and `20` for space.

* `encrypt=` - *Optional*, the default value is `ENCRYPT`.
Indicate if `FCMP` functions generated by the package
are encrypted. Value has to be either empty or `ENCRYPT`,
all other are converted to default. The option is
dedicated for debugging, keep the default value
for production use.

* `trim=` - *Deprecated*, the default value is `0`.
*Kept for backward compatibility.*

---

### Example: ###################################################################

Example 1. Prepare 2 files: `f1.sas` and `f2.sas` and use the `%GSM()` macro.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~sas
%let path = %sysfunc(pathname(work))/path2files;
%put &=path.;
options dlcreatedir;
libname path "&path.";
filename path "&path.";
data _null_;
file path(f1.sas);
input;
put _infile_;
cards4;
%macro abc(x) / SECURE;
data test;
do i = 1 to &x.;
put i=;
end;
run;
%mend;
;;;;
run;
data _null_;
file path(f2.sas);
input;
put _infile_;
cards4;
%macro xyz(x) / SECURE;
%do i = 1 %to &x.;
%put &=i;
%end;
%mend;
;;;;
run;
%GSM(&path., cmplib=work.myMacros)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

## >>> `%GSMpck_makeFCMPcode()` macro: <<< <a name="GSMpck-makeFCMPcode-macro"></a> #######################

The `%GSMpck_makeFCMPcode()` macro is an internal macro of
the **GSM** (a.k.a. *Generate Secure Macros*) package.

It executes a process of converting
a macro provided by the user into
a Proc FCMP function.

Since encrypted code is stored in a SAS dataset it has
no limitation in sharing between operating systems (like catalogs have).

*Limitation:* Single macro file cannot be longer than 32760 bytes.

### SYNTAX: ###################################################################

The basic syntax is the following, the `<...>` means optional parameters:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~sas
%GSMpck_makeFCMPcode(
path
,number
<,outlib=work.generateMacros.secure>
<,source2=>
<,fileNameCode=FNC>
<,secret=123456789>
<,lineEnd=0A>
)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

**Arguments description**:

1. `path` - *Required*, indicates a directory which contains files with macros.
Only files with `sas` extension are used.

2. `number` - *Required*, a sequential number.


* `cmplib=` - *Optional*, the default value is `work.generateMacros`.
Names the dataset which will contain generated functions.

* `source2=` - *Optional*, the default value is null.
Indicate if `%includ`-ed files are printed out.
Any value other than null enables printing.

* `fileNameCode=` - *Optional*, the default value is `FNC`.
Internal fileref.

* `secret=` - *Optional*, internal, the default value is `1234567890`.
Alphanumerical constant required to execute the `resolve()`
function. User who do not know the value will not be able
to run the `_maxro_XX_()` function.

* `lineEnd=` - *Optional*, the default value is `0D0A`, indicates which of:
line feed, carriage return, or both, or a space be inserted
at the end of line in the intermediate code file that is generated.
Value has to be hexadecimal code (_NOT_ null),
since the value is resolved as `"&lineEnd."x`, so use e.g.
`0A` for line feed, `0D` for carriage return,
`0D0A` for both, and `20` for space.

* `trim=` - *Deprecated*, the default value is `0`.
*Kept for backward compatibility.*

---


## License ####################################################################

Copyright (c) Bartosz Jablonski, since 2021

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

---
Binary file added hist/0.22.0/gsm.zip
Binary file not shown.

0 comments on commit 27abf39

Please sign in to comment.