San Jose, CA, November 16, 2020

PACE Anti-Piracy, Inc. a leader in in-app protection technologies today announces the release of White-Box Works—a next-generation white-box code generator. This new in-app protection tool is a groundbreaking approach to white-box technology. Its unique industry-leading architecture adds new dimensions of security to protect cryptographic secrets against the most advanced discovery attacks.

Overview

White-Box Works is a white-box code generator, not simply a library of protected cryptographic operations. With White-Box Works software developers can generate or update an unlimited number of unique white-box implementations on-demand, keeping your team nimble and your bottom line safe from unexpected support bills. With White-box Works, updating your app no longer means updating your development budget.

White-Box Works includes many enhancements vs. previous generations of white-box products.

1. Advanced proprietary architecture translates into resistance to the latest cryptographic attacks
2. Algorithm agnostic
3. Support for non-deterministic algorithms

The use of cryptography has grown significantly in recent years, and it’s increasingly common for applications to leverage cryptography. As encouraging as this might be, many developers have a false impression about what the use of cryptography in their application actually means in terms of security.

When an application encrypts data and sends it to a third party (that has a key to decrypt it), the data is protected in transit, but nothing is protecting the encrypt/decrypt operations themselves. If an attacker gains access to either device (a bank app running on a mobile device for example) they can easily extract an unencrypted copy of the key at the instance at which the key is decrypted.

Depending on how the application manages keys, this may allow the attacker to decrypt all past and future data sent by the application and possibly even all data sent by all users of the application. The result of such an attack is not simply a single compromised app, but potential intellectual property loss, DRM class breaks, back-end systems compromise, risk of costly GDPR and CCPA regulatory action, as well as damage to the App developer’s reputation and brand.

White-Box Works is an unmatched in-app protection tool to address this problem.

In cryptographic implementations transformed by White-Box Works, private keys, content keys and license store keys, trusted constants such as public keys, and proprietary algorithms are all executed within the boundaries of the White-Box and are never visible in a decrypted state in the static application or in runtime memory. White-Box Works was designed to defeat reverse engineering attacks and advanced statistical analysis attacks (like Differential Computation Analysis).

White-Box Works is a new, unique solution for adding white-box cryptography to applications. It provides unmatched protection for cryptographic keys vs. legacy solutions and is more flexible without compromising ease of use or performance.

Availability

White-Box Works is available today to software publishers as an option when updating their products.

Statement from PACE’s CEO

Allen Cronce, CEO of PACE Anti-Piracy, Inc. states: “As app developers move more and more software logic to client side implementations, there is a pressing need to harden security related code against attacks. Financial services, identity, contact tracing, biotech and automotive apps are particularly vulnerable given their architectures.” With White-Box Works, PACE meets this need by providing comprehensive multi-layered security for keys and data.

About PACE Anti-Piracy, Inc.

PACE Anti-Piracy, Inc. is a privately held company based in San Jose, California. Since 1985, PACE has provided software publishers and distributors with high-quality solutions for secure software distribution. PACE products are used by a growing number of world-class software publishers around the world.

Contact: [email protected]

Source: https://thenewsfront.com/pace-anti-piracy-announces-white-box-works-a-next-generation-white-box-code-generator-to-secure-cryptographic-keys-and-data-against-discovery/