On 29 Dec 2009, at 16:10, Rafael Bugajewski wrote:

> On 12/29/2009, at 04:54 PM, Uli Kusterer wrote:
> 
>> *never* ship the code that generates a key in any way, especially if it is 
>> part of your SN check.
> 
> So what alternatives do you propose? (Probably I just misunderstood this 
> sentence)
> 
> I mean, you have to check the serial in some way, in most cases it’s the 
> reverse of your key generation code.

Not if you use an asymmetric encryption algorithm (based on public/private key 
pairs). This makes creation of key generators practically impossible, as key 
generation code is different from key verification code and is not part of your 
shipping application.

AquaticPrime (RSA-based, file-based keys): http://www.aquaticmac.com/

CocoaFob (my own, DSA-based, textual keys): http://github.com/gbd/cocoafob/
CodexFab (a sample implementation using CocoaFob): 
http://github.com/machinecodex/CodexFab

HTH

Gleb Dolgich
http://pixelespressoapps.com



------------------------------------

MacSB email guidelines: http://tinyurl.com/2g55d6
Use MacSB-Talk for off topic messages: http://groups.google.com/group/macsb-talk
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/macsb/

<*> Your email settings:
    Individual Email | Traditional

<*> To change settings online go to:
    http://groups.yahoo.com/group/macsb/join
    (Yahoo! ID required)

<*> To change settings via email:
    [email protected] 
    [email protected]

<*> To unsubscribe from this group, send an email to:
    [email protected]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/

Reply via email to