The strings aren't compile-time encrypted, they're just baked into the *.dll rather than the *.exe.
Reproducable with strings from SysInternals.
C:\Users\[User]\Downloads>strings.exe "[Path]\SecureStringNAOT\SecureStringNAOT\SecureStringNAOT\bin\Release\net7.0\SecureStringNAOT.dll" > out.txt
Shows the raw strings:
While the *.exe doesn't show the strings:
This means if you try to make a NativeAOT single-published file, the string is still in the executable.
I tried under both .net 7,8,9 with all the same result.
The strings aren't compile-time encrypted, they're just baked into the *.dll rather than the *.exe.
Reproducable with strings from SysInternals.
C:\Users\[User]\Downloads>strings.exe "[Path]\SecureStringNAOT\SecureStringNAOT\SecureStringNAOT\bin\Release\net7.0\SecureStringNAOT.dll" > out.txtShows the raw strings:
While the *.exe doesn't show the strings:
This means if you try to make a NativeAOT single-published file, the string is still in the executable.
I tried under both .net 7,8,9 with all the same result.