Re: public key in the binary

2007-10-03 Thread Md Lazreg
On 10/3/07, David Schwartz <[EMAIL PROTECTED]> wrote: > > > > I need a way to hide the public key in the binary... > > You can't ask in public for a good hiding place. > > Note that your question has *nothing* to do with OpenSSL or even public > key > encryption for that matter. Your question is ba

RE: public key in the binary

2007-10-03 Thread David Schwartz
> I need a way to hide the public key in the binary... You can't ask in public for a good hiding place. Note that your question has *nothing* to do with OpenSSL or even public key encryption for that matter. Your question is basically "how do I make a tamperproof executable". DS _

Re: public key in the binary

2007-10-03 Thread Yves Rutschle
On Wed, Oct 03, 2007 at 11:11:26AM -0500, Md Lazreg wrote: > > What problem does preventing the user from fielding a modified application > > solve? > > > It solves the problem of preventing the user from running my application in > a mode they did not pay for. If your target is PC software, th

Re: public key in the binary

2007-10-03 Thread Marek Marcola
Hello, > If your users are not technically sophisticated, and the application is > aimed at paying business customers and not the general public, it is > enough to compile the key into the application. Businesses don't like > being caught stealing. > > If or users are the general public and/or the

Re: public key in the binary

2007-10-03 Thread Mikhail Kruk
On Wed, 3 Oct 2007, Md Lazreg wrote: On 10/3/07, Victor Duchovni <[EMAIL PROTECTED]> wrote: On Wed, Oct 03, 2007 at 10:42:59AM -0500, Md Lazreg wrote: Private keys do encrypt using the function : http://www.openssl.org/docs/crypto/RSA_private_encrypt.html Of course they do, but when a priv

Re: public key in the binary

2007-10-03 Thread Victor Duchovni
On Wed, Oct 03, 2007 at 11:11:26AM -0500, Md Lazreg wrote: > On 10/3/07, Victor Duchovni <[EMAIL PROTECTED]> wrote: > > > > On Wed, Oct 03, 2007 at 10:57:39AM -0500, Md Lazreg wrote: > > Is this DRM? DRM is not possible without > > trusted hardware, and even then is difficult. > > > Yes it is DR

Re: public key in the binary

2007-10-03 Thread Md Lazreg
On 10/3/07, Victor Duchovni <[EMAIL PROTECTED]> wrote: > > On Wed, Oct 03, 2007 at 10:57:39AM -0500, Md Lazreg wrote: > Is this DRM? DRM is not possible without > trusted hardware, and even then is difficult. Yes it is DRM in a way. I know it is not possible to have a 100% protection using only

Re: public key in the binary

2007-10-03 Thread Victor Duchovni
On Wed, Oct 03, 2007 at 10:57:39AM -0500, Md Lazreg wrote: > > If you are signing, your model is fine, and embedding the public key in > > the binary is exactly the right thing to do. If you are encrypting, > > use a symmetric algorithm, the public key algorithm is just confusing > > you. > > Yes

Re: public key in the binary

2007-10-03 Thread Md Lazreg
On 10/3/07, Victor Duchovni <[EMAIL PROTECTED]> wrote: > > On Wed, Oct 03, 2007 at 10:42:59AM -0500, Md Lazreg wrote: > > > Private keys do encrypt using the function : > > http://www.openssl.org/docs/crypto/RSA_private_encrypt.html > > Of course they do, but when a private key encrypts, it is > ca

Re: public key in the binary

2007-10-03 Thread Victor Duchovni
On Wed, Oct 03, 2007 at 10:42:59AM -0500, Md Lazreg wrote: > Private keys do encrypt using the function : > http://www.openssl.org/docs/crypto/RSA_private_encrypt.html Of course they do, but when a private key encrypts, it is called "signing", because the public key is presumed to be (drum roll..

Re: public key in the binary

2007-10-03 Thread Md Lazreg
On 10/3/07, Victor Duchovni <[EMAIL PROTECTED]> wrote: > > On Wed, Oct 03, 2007 at 10:04:26AM -0500, Md Lazreg wrote: > > > I am encrypting a file using a private key, and my program is decrypting > it > > using the public key compiled in the binary. > > Private keys don't "encrypt" they sign. The

Re: public key in the binary

2007-10-03 Thread Richard Levitte
In message <[EMAIL PROTECTED]> on Wed, 3 Oct 2007 10:04:26 -0500, "Md Lazreg" <[EMAIL PROTECTED]> said: mdlazreg> I am encrypting a file using a private key, and my program mdlazreg> is decrypting it using the public key compiled in the mdlazreg> binary. If it isn't an automatic process of some

Re: public key in the binary

2007-10-03 Thread Victor Duchovni
On Wed, Oct 03, 2007 at 10:04:26AM -0500, Md Lazreg wrote: > I am encrypting a file using a private key, and my program is decrypting it > using the public key compiled in the binary. Private keys don't "encrypt" they sign. The public key *verifies*. If you want to encrypt, you use the "public" k

RE: public key in the binary

2007-10-03 Thread Dan Clusin
Don't save it in the binary? Regards, Daniel Clusin EnerNOC, Inc. (617)5328154 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Md Lazreg Sent: Wednesday, October 03, 2007 11:04 AM To: openssl-users@openssl.org Subject: public key in the binar