Infralution Support Forum Index Infralution Support
Support groups for Infralution products
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Good security results... check Infralution's reply...

 
Post new topic   Reply to topic    Infralution Support Forum Index -> Licensing Support
View previous topic :: View next topic  
Author Message
Anonnae Moose



Joined: 07 Sep 2012
Posts: 2

PostPosted: Fri Sep 07, 2012 8:22 am    Post subject: Good security results... check Infralution's reply... Reply with quote

Even if someone where to find the keys below, they wont help - check the information posted by Infralution below! Smile


private static byte[] _desKey = new byte[8]
{
(byte) 18,
(byte) ***,
(byte) 168,
(byte) ***,
(byte) ***,
(byte) ***,
(byte) ***,
(byte) ***,
};

private static byte[] _desIV = new byte[8]
{
(byte) 163,
(byte) ***,
(byte) ***,
(byte) ***,
(byte) ***,
(byte) ***,
(byte) ***,
(byte) 177
};


Last edited by Anonnae Moose on Fri Sep 07, 2012 9:48 am; edited 1 time in total
Back to top
View user's profile Send private message Send e-mail
Infralution



Joined: 28 Feb 2005
Posts: 5027

PostPosted: Fri Sep 07, 2012 9:16 am    Post subject: Reply with quote

Actually you may think you have found something - but you haven't. The DES keys you have found are only used to scramble the license key payload - so that if you been issued a valid encrypted license key it makes it a little more difficult for you to see the components in the key (eg the license key serial number and ProductInfo).

These keys are not used at all to validate the license key which is done using an RSA public key signature. It is impossible to reverse engineer a valid license key from the source code. That is why we are quite happy to provide the source code to customers - because it doesn't reduce the security at all. The DES keys you have found won't help you generate a valid license key at all.

For Authenticated License keys there is actually another layer of security which encrypts the license key again using a key which only the Authentication Service has. This means that you can't even unscramble a valid authenticated license key to see the components even if you have the DES keys above.
_________________
Infralution Support
Back to top
View user's profile Send private message Visit poster's website
Anonnae Moose



Joined: 07 Sep 2012
Posts: 2

PostPosted: Fri Sep 07, 2012 9:45 am    Post subject: Reply with quote

That's good to know. Very Happy
Back to top
View user's profile Send private message Send e-mail
Display posts from previous:   
Post new topic   Reply to topic    Infralution Support Forum Index -> Licensing Support All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group