TweetFollow Us on Twitter

Nov 97 Viewpoint

Volume Number: 13 (1997)
Issue Number: 11
Column Tag: Viewpoint

Viewpoint

by Eric Gundrum

Why All This Crypto Stuff?

You can't have digital commerce unless you can be certain that your digital data is unadulterated. That's where cryptography comes in. Most people think of cryptography simply as a means to hide data, but actually it is much more useful than that. Through cryptography, we can assure (within reasonable expectations) that a block of data has not been changed by any intermediate party.

Imagine that you are a software publisher, and you want to use the Internet to distribute an update to your software. You could post the update to a few key software distribution sites and let it propagate. Within a day or two everyone would have access to it, but how can you be certain that it was your version of the update that was distributed? What's to stop some malicious person from releasing his own version of your updater and embedding his newly created virus? (Many readers may recall a similar situation with the recent release of a bogus StuffIt Deluxe 4.5 package as a trojan horse.) This problem can easily be prevented through the proper use of cryptography; in this case, digital signatures.

Another use of cryptography is access certificates. Imagine selling your software over the 'Net: your potential customer begins by examining a trial version of your software. The customer decides to purchase the software and sends you payment through some digital means. (Payment could be digital cash, digital checks, credit card information through an SSL connection, or some other means.) Once you have settled the payment with a bank (to be sure it is not fraudulent), you send an authentication code to the customer so they can turn the trial version of the software into the fully paid version. What is that authentication code? Many software companies struggle for countless hours trying to develop a serial number that can't be easily guessed or changed, and contains enough information to be traceable back to the customer in case they give it out for their friends to use. Another limitation of this mechanism is that you, the publisher, must maintain a database to map all the serial numbers to customers. This becomes even more complicated when you have single customers purchasing more than one copy of the product, or add site licenses, multiple versions, or other products.

Access certificates eliminate most of the limitations of serial numbers. An access certificate is a document which contains all the information the software publisher uses to control access to the software. This can include the purchaser's name and contact information and various license restrictions such as how many copies can be used simultaneously or when this use of the software expires. Cryptography is used to digitally sign the access certificate; the software being accessed can check this signature to verify the document has not been altered. The software can read the certificate to determine what restrictions to impose on the use of the software. If the information in the certificate is stored as clear text, then the customer also can see what restrictions are on the license. This certificate serves much the same purpose as a serial number; however, users are much less likely to distribute a certificate to friends when they see that their name and address is included in that certificate.

There are many uses of cryptography besides hiding data. The certificates mentioned above can be extended to limit access to services as well as software. No need for users and groups databases. No need to remember all those different passwords we each have on all the different systems we access. This could make our digital lives so much easier.

What's Holding Us Back?

We have most of the technology we need to make broad use of cryptography, but the technology is not deployed. The United States Government is actively trying to restrict access to the technology. They prevent software which uses the technology from being exported from the U.S. They also are coercing other governments to impose restrictions on the use of cryptography in those societies. The resulting fear, uncertainty, and doubt make U.S.-based businesses reluctant to develop products that use cryptographic technology, even when those products use only digital signatures, and therefore could easily get an export license.

Some companies, such as Microsoft, PGP and Sun, are actively working to have these export restrictions removed. Unfortunately Apple, as a member of the Key Recovery Alliance, is supporting the anti-cryptography stance of the U.S. Government. PGP http://www.pgp.com/ is the original strong cryptographic technology for the masses, available throughout the world on many platforms. They have done more to relieve the U.S. export restrictions than any other company. Recently, they released a number of new Macintosh products making cryptography easy for anyone to use. They are working on a developer's kit so we developers can add cryptographic services to our applications. Microsoft is building developer-accessible cryptography into a variety of products, including a future version of Windows. Sun has developed a cryptography module (JCE, http://www.javasoft.com/security/) for Java 1.1, but it is not available for the Mac.

Apple's position is quite sad, especially considering that Apple holds patents to some of the strongest cryptographic technology invented and some of the least restrictive licenses to other cryptographic technology. Hopefully, Apple will soon recognize the market opportunities they could develop by making these technologies available to developers as part of the OS. Fortunately there are some Macintosh-friendly software publishers picking up some of the slack, including PGP. Consensus Development http://www.consensus.com/ is another company that has had cryptographic technology available for years. Currently, they have a multi-platform SSL3 library, as well as other technologies in development. If you are interested in learning more about cryptography on the Mac, be sure to check out Vinnie Moscaritolo's crypto pages at http://www.vmeng.com/mc/.

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

ffWorks 3.3.5 - A Comprehensive Video Co...
ffWorks, focused on simplicity, brings a fresh approach to the use of FFmpeg, allowing you to create ultra-high-quality movies without the need to write a single line of code on the command-line.... Read more
Arq 7.19.11 - Online backup to Google Dr...
Arq is super-easy online backup for Mac and Windows computers. Back up to your own cloud account (Amazon Cloud Drive, Google Drive, Dropbox, OneDrive, Google Cloud Storage, any S3-compatible server... Read more
Opera 97.0.4719.28 - High-performance We...
Opera is a fast and secure browser trusted by millions of users. With the intuitive interface, Speed Dial and visual bookmarks for organizing favorite sites, news feature with fresh, relevant content... Read more
Google Chrome 111.0.5563.110 - Modern an...
Google Chrome is a Web browser by Google, created to be a modern platform for Web pages and applications. It utilizes very fast loading of Web pages and has a V8 engine, which is a custom built... Read more
Vivaldi 5.7.2921.65 - An advanced browse...
Vivaldi is a browser for our friends. We live in our browsers. Choose one that has the features you need, a style that fits and values you can stand by. From the look and feel, to how you interact... Read more
Ableton Live 11.2.11 - Record music usin...
Ableton Live lets you create and record music on your Mac. Use digital instruments, pre-recorded sounds, and sampled loops to arrange, produce, and perform your music like never before. Ableton Live... Read more
Adobe Acrobat DC 23.001.20093 - Powerful...
Acrobat DC is available only as a part of Adobe Creative Cloud, and can only be installed and/or updated through Adobe's Creative Cloud app. Adobe Acrobat DC DC with Adobe Document Cloud services is... Read more
Adobe Acrobat Reader 23.001.20093 - View...
Adobe Acrobat Reader allows users to view PDF documents. You may not know what a PDF file is, but you've probably come across one at some point. PDF files are used by companies and even the IRS to... Read more
Paragon NTFS 15.10.590 - Provides full r...
Paragon NTFS breaks down the barriers between Windows and macOS. Paragon NTFS effectively solves the communication problems between the Mac system and NTFS. Write, edit, copy, move, delete files on... Read more
Slack 4.31.152 - Collaborative communica...
Slack brings team communication and collaboration into one place so you can get more work done, whether you belong to a large enterprise or a small business. Check off your to-do list and move your... Read more

Latest Forum Discussions

See All

Recapping All the Best Drama – The Touch...
In this week’s episode of The TouchArcade Show we recap all the big drama of the week, because drama=clicks baby! I also talk about the new WaterField Magnetic Gaming Case for the Steam Deck, which just arrived in my hot little hands a couple of... | Read more »
TouchArcade Game of the Week: ‘Well Word...
We were already big fans of developer BJ Malicoat, who does business under the name Bird Cartel, due to the release of Pine Tar Poker late last year. Poker is one of those games that kind of is what it is, so it’s always very hard to come up with... | Read more »
SwitchArcade Round-Up: Reviews Featuring...
Hello gentle readers, and welcome to the SwitchArcade Round-Up for March 24th, 2023. It turned out to be a fairly busy one today. We’ve got a little news to look at, plus a review from our pal Mikhail. After that, we get into the many new releases... | Read more »
‘Honkai Star Rail’ Release Date Announce...
Last month, Genshin Impact and Honkai Impact 3rd developer HoYoverse began pre-orders and pre-registrations for the upcoming space fantasy turn-based RPG Honkai Star Rail. | Read more »
Tactical Card Battling RPG ‘Black Book’...
Developer Merteshka and publisher HypeTrain Digital just revealed an iOS version of the card battling tactical RPG Black Book . Black Book is available on PC, Nintendo Switch, Xbox One, and PS4 right now. It will be coming to iOS on April 21st with... | Read more »
Clue/Cluedo: Hasbro’s Mystery Game+ Is T...
Clue: Hasbro’s Mystery Game+ from Marmalade Game Studios is this week’s new Apple Arcade release and it is out now alongside some notable updates. Clue: Hasbro’s Mystery Game+ or Cluedo: Hasbro’s Mystery Game+ depending on your region joins the... | Read more »
‘Stakes Winner ACA NEOGEO’ Review – A Ho...
When it comes to the NEOGEO, a few genres come to mind. Fighting games. Side-scrolling action games. Maybe shooters and beat-em-ups. The usual array of sports. You probably don’t think of horse racing games, but this was an arcade platform that was... | Read more »
SwitchArcade Round-Up: Reviews Featuring...
Hello gentle readers, and welcome to the SwitchArcade Round-Up for March 23rd, 2023. In today’s article, we kick things off with a couple of reviews. I take a look at Playism and kouri’s Ib, while our pal Mikhail has a look at the latest DLC... | Read more »
Snowbreak: Containment Zone is the lates...
Mobile gaming enthusiasts will soon be able to get their fill of sci-fi shooting, with Amazing Season announcing their upcoming game, Snowbreak: Containment Zone. Pre-registrations are now open for fans, and we also have their first trailer to get... | Read more »
Square Enix’s Card RPGs Voice of Cards:...
Back in late 2021, Square Enix released a new card-based RPG Voice of Cards: The Isle Dragon Roars on PS4, Nintendo Switch, and PC featuring some of the staff behind the NieR and Drakengard games. This included Yoko Taro, Yosuke Saito, Keiichi Okabe... | Read more »

Price Scanner via MacPrices.net

Shop our Apple MacBook Price Trackers for the...
We’ve updated our Apple award-winning MacBook Price Trackers with the latest information on prices, bundles, and availability for 16″, 14″, and 13″ MacBook Pros along with 13″ MacBook Airs from Apple... Read more
Back in stock: M1-powered Mac minis for only...
Apple has restocked clearance M1-powered Mac minis in their Certified Refurbished section starting at only $469. Each mini comes with Apple’s one-year warranty, and shipping is free. The following... Read more
Apple to release updated AirPods Pro 2 with U...
Analyst Ming-Chi Kuo, in his latest post, suggests that Apple will soon release an updated version of AirPods Pro 2 with a new USB-C case, replacing the current case using an Apple Lightning... Read more
16″ M2 Pro MacBook Pros on sale for $150 off...
Apple retailer Expercom has 16″ M2 Pro MacBook Pros in stock today and on sale for $150 off MSRP, valid through March 28, 2023. In addition to their MacBook Pro sale prices, take $50 off AppleCare+... Read more
13-inch M2 MacBook Pros on sale for $100 off...
Expercom has 13″ MacBook Pros with Apple M2 processors in stock and on sale today for $100 off MSRP through March 28, 2023. Shipping is free: – 2022 13″ MacBook Pro M2 CPU/256GB SSD: $1199, save $100... Read more
Amazon is selling Apple’s 24″ M1 iMacs for $2...
Amazon has Apple’s 24″ M1 iMacs on sale for $200 off MSRP. Their prices are currently the lowest available for new iMacs among the Apple retailers we track: – 24″ M1 iMacs (8-Core CPU/7-Core GPU/... Read more
Apple’s 10th-generation 10.2″ iPads are on sa...
Amazon has Apple’s 10th-generation iPads on sale for $50 off MSRP starting at only $399. Their discount applies to all models and all colors. With the discount, Amazon’s prices are the lowest... Read more
Apple 13-inch MacBook Pros are on sale for $1...
Amazon has 13″ MacBook Pros with Apple M2 processors in stock and on sale today for $150 off MSRP. Their prices are the lowest currently available these MacBook Pros. Be sure to purchase from Amazon... Read more
Apple Pro Display XDR with Nano-Texture Glass...
Apple Authorized Retailer Adorama has the Pro Display XDR with Nano-Texture Glass on sale for $500 off MSRP today. Shipping is free: – Apple 27″ Pro Display XDR Nano-Texture Glass: $5499 $500 off... Read more
10-Core M1 Max Apple Mac Studio on sale for $...
Adorama has the base 10-Core M1 Max Mac Studio in stock and on sale today for $1799 including free shipping. Their price is $200 off Apple’s MSRP, and it’s the lowest price available for a new Mac... Read more

Jobs Board

Omnichannel Associate - *Apple* Blossom Mal...
Omnichannel Associate - Apple Blossom Mall Location:Winchester, VA, United States (https://jobs.jcp.com/jobs/location/191170/winchester-va-united-states) - Apple Read more
Hair Stylist - *Apple* Blossom Mall - JCPen...
Hair Stylist - Apple Blossom Mall Location:Winchester, VA, United States (https://jobs.jcp.com/jobs/location/191170/winchester-va-united-states) - Apple Blossom Read more
Beauty Consultant - *Apple* Blossom Mall -...
Beauty Consultant - Apple Blossom Mall Location:Winchester, VA, United States (https://jobs.jcp.com/jobs/location/191170/winchester-va-united-states) - Apple Read more
Sales Floor Associate - *Apple* Blossom Mal...
Sales Floor Associate - Apple Blossom Mall Location:Winchester, VA, United States (https://jobs.jcp.com/jobs/location/191170/winchester-va-united-states) - Apple Read more
Cashier - *Apple* Blossom Mall - JCPenney (...
Cashier - Apple Blossom Mall Location:Winchester, VA, United States (https://jobs.jcp.com/jobs/location/191170/winchester-va-united-states) - Apple Blossom Mall Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.