White-box cryptography deals with the secure implementation of cryptographic algorithms in an environment that allows an attacker to have complete access to the implementation. Until recently, these kinds of implementations of cryptographic methods were primarily used in the context of digital rights management. Typical attacks involved manual reverse engineering of the software.
Lately, new applications for white-box cryptography have emerged. A prominent example is mobile payment. At the same time, new attack techniques have been developed. These are similar to DPA attacks, well known in the smart-card world, and can efficiently break existing implementations of white-box cryptography.
This Whitepaper contains an introduction into white-box cryptography. It describes this new type of attack and discusses possible countermeasures.
Download now to find out more!