c# - Real world application using RSA encryption for licensing -


For the past several days, I've been reading a lot of posts about RSA encryption. I have learned a lot but unfortunately this is new to me because now I am deep in new information and am trying to solve everything.

Here for some background I have read / write articles, I am ready to make my own solution (in a particular order).

,,,, and.

It was a long way away

I really have an unstable understanding on this process which takes me to my next step ... the process Seeing that I found both of these posts to use RSA for licensing which was my end game, Link 1 had a codeproduction which I downloaded and was useful.

I was thinking of a separate licensing plan (definitely open for suggestions)

I have many plugins / widget things that increase web sites. Was going to publish the public key.

The plugin will then be a "phone home" with the public key and my server will take the public key and match it and will provide an "authorization" token for a period of time ... test duration, 1 year Membership etc.

The question comes to me as the codeprogress in above license 1 is an additional component of a hardware signature such as the "public" portion.

I understand the idea of ​​hardware signature but not sure how it fits with the other RSA scheme.

So I correctly understand that RSA will only encrypt the data on the wire and I still need some form of license. It is true that my license request from the client can be encrypted using the embedded public key, decrypted on the server ..., but then the responder will be encrypted back to the response?

Otherwise, I must publish RSA encryption / decryption process as well as public and private keys in the plugin / widget

thanks

Sign a license token using your RSA private key which is locked and stays under the key on your server. Embed the public key in your app Now, anyone with the public key can verify, your app can verify the license on the license token and it can know that it came from the server. There is no need to encrypt anything.

Never embed the private key in the app not it is completely insecure, looking at the public key, it is trivial to calculate the public key.


Comments

Popular posts from this blog

HTML/CSS - Automatically set height width from background image? -

php - Mysql Show Process - Sleep Commands and what to do -

c - What is the address of buf (the local variable in the main function)? -