We also found that the encrypted local store wasn¹t effective for
pre-popluated or user persisted data. We ended up building our own encrypted
container as we needed to be able to allow a user to backup and recover it
as data in the ELS directory isn¹t necessarily available to the Vista user
without administrative privileges.
K

On 6/2/09 10:23 AM, "arieljake" <[email protected]> wrote:
> 
> Hi all, I need some help from the community with this. I am very close to a
> solution, but may have hit a snag.
> 
> The accepted approach for encrypting an AIR app is to deliver an encrypted swf
> with a wrapper that decrypts and loads the child.
> 
> The issue becomes how/where to store the decryption key for the wrapper to use
> when loading the child.
> 
> Nitro-LM / Simplified Logic embeds the key in wrapper and uses proprietary
> methods to make extracting that key difficult.
> 
> Here is the alternative I am playing with:
> 
> Company X create a simple program compiled with the same product id and AIR
> certificate as the program they are distributing to generate at home base the
> files for an empty Encrypted Local Store that has had the encryption key added
> to it. Then, the Encrypted Local Store files created by AIR are added to the
> AIR file - these files are encrypted with AIR's encryption mechanism. When the
> AIR file is installed, these files are then copied by the wrapper into the
> Encrypted Local Store directory and then read from using the AIR API for the
> Encrypted Local Store - and voila - the wrapper has the decryption key and the
> key is never transmitted in clear text.
> 
> I tried this and it seemed to work, but then it seems as if it doesn't work
> from one computer to the next - AIR seems to encrypt the ELS files with a
> formula that includes the program ID, the AIR certificate, AND the user's
> computer id, which prevents the company from distributing the original ELS
> files. 
> 
> Can only Adobe verify whether this solution will work? Can anyone lend insight
> / advice on this? Thanks.
> 
>   
>     
> 
>> 
> 
> Kevin F. Benz
> [email protected]    425-785-7100
> http://www.kbenz.com
> 
> "We can't solve problems by using the same kind of thinking we used when we
> created them" - Albert Einstein
> 

Reply via email to