Infralution Support Forum Index Infralution Support
Support groups for Infralution products
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

ECC versus RSA, Fastspring, and online/offline activation

 
Post new topic   Reply to topic    Infralution Support Forum Index -> Licensing Support
View previous topic :: View next topic  
Author Message
twinbee



Joined: 31 Oct 2015
Posts: 1

PostPosted: Sat Oct 31, 2015 12:48 pm    Post subject: ECC versus RSA, Fastspring, and online/offline activation Reply with quote

A few questions before I consider purchasing Ingralution:

1: Do you offer support for the eCommerce site FastSpring where the user automatically gets sent the key/license after purchase?

2: I hear Infralution offers a web activation service. What programming language (if any) would my hosting be required to support for this?

3: If I don't use online activation, would my product's security be heavily compromised? Some say that having the program doing the activation offline allows a hacker to have a keygen (to create unlimited keys) once they've reverse engineered my program.

4: Does Infralution support ECC, or just RSA? I ask because a few comments from around the web seem to think ECC is very useful:

http://www.codeproject.com/Articles/398130/Software-Copy-Protection-for-Net-Applications-a-Tu
- "The correct way to generate license keys is to use digital signatures and public/private key encryption. The problem is that the RSA algorithm is not suitable for this.............(why ECC and not RSA? Because with RSA, the generated license keys would be way too long - like hundreds of characters long)"

http://www.tech.theplayhub.com/how_to_generate_and_validate_a_software_license_key/
- "A drawback is that even with the smallest RSA key you will have a pretty long code to ship (384 bits, ~70 alphanum tokens), not suitable for over the telephone or even typing in".

Any thoughts on that?
Back to top
View user's profile Send private message
Infralution



Joined: 28 Feb 2005
Posts: 5027

PostPosted: Sun Nov 01, 2015 10:54 pm    Post subject: Reply with quote

1. We don't have out of the box support for FastSpring - but a number of customers are integrating with FastSpring using our customizable sales import mechanism. See the last post on topic below for a sales import definition that works for FastSpring

http://www.infralution.com/phpBB2/viewtopic.php?t=1607

Another customer developed a small Outlook AddIn to handle notifications from FastSpring and automatically import data:

http://www.infralution.com/phpBB2/viewtopic.php?t=2104

2. The Authentication Service is written in C# and so requires ASP.NET 2.0 or later. It can use either an Access database or SQL Server

3. If you don't use authentication and use simple encrypted licenses then the main issue is that there is no way to prevent license keys being shared/used on multiple computers. It depends on your application whether this is a major issue. Decompiling your application will not allow a hacker to create a key gen for your application when using encrypted licenses. This is because ILS uses public key encryption to validate keys - this means that the key used to generate the license key is not included in the application code anywhere and cannot be extracted from the code.

4. Using RSA naively to encrypt a whole license would result in very long keys. Instead ILS signs a chunk of secret data (which is included in valid license keys) and the (very long) RSA signature is included in your application code and used to verify the key. This allows simple encrypted keys to be secure while remaining reasonably short. Authenticated licenses are even more secure because the licence key is encrypted again using a key which is only available to the Authentication Server and the returned license files are signed using public key encryption.
_________________
Infralution Support
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    Infralution Support Forum Index -> Licensing Support All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group