A method and apparatus for controlling the unauthorized removal of software from a non-volatile storage medium include storing an encoded version of the software at an address of the storage medium where the address is used as data directly in the process of deriving an encoding key used to encode the software, and decoding the encoded software using a decoding key derived using the location of the software in its storage medium as data.