encrypting licenses

[ReneMarxis]

Hello

i have one question reguarding crypting.
First let me explain what i like to do:
I need to pass some licese files to customers. Everything needs to be
done "offline" which requires
me to send files to the customer that include the license
I like to encrypt the license file in one application and decrypt it
at the customer on an other application.

I did read a little on encryption and did not find any way to do the
following:
Use a private key-pair to encrypt and an public one to decrypt.

Every encryption-methods seem to be build up exactly the way arround:
use public key to encrypt and private to decrypt.
But as the private key also includes the public key, i would end up in
putting the key to encrypt the license in the customer application.
This is something i don't like of course.

Now what i need is not some way to encrypt data so it is not readable
but encrypt it in a way that it is not reproduceable.

Is this something thats achiveable with signed data (signed xml eg.)?

many thanks in advance

_rene

[=?Utf-8?B?UGV0ZXIgQnJvbWJlcmcgW0MjIE1WUF0=?=]

Why not just encrypt the license file contents and have your program itself
do the decryption at runtime from the supplied license file?

--Peter
"Inside every large program, there is a small program trying to get out."
http://www.eggheadcafe.com
http://petesbloggerama.blogspot.com
http://www.blogmetafinder.com

"ReneMarxis" wrote:

Hello

i have one question reguarding crypting.
First let me explain what i like to do:
I need to pass some licese files to customers. Everything needs to be
done "offline" which requires
me to send files to the customer that include the license
I like to encrypt the license file in one application and decrypt it
at the customer on an other application.

I did read a little on encryption and did not find any way to do the
following:
Use a private key-pair to encrypt and an public one to decrypt.

Every encryption-methods seem to be build up exactly the way arround:
use public key to encrypt and private to decrypt.
But as the private key also includes the public key, i would end up in
putting the key to encrypt the license in the customer application.
This is something i don't like of course.

Now what i need is not some way to encrypt data so it is not readable
but encrypt it in a way that it is not reproduceable.

Is this something thats achiveable with signed data (signed xml eg.)?

many thanks in advance

_rene

[ReneMarxis]

On 24 Nov., 17:45, Peter Bromberg [C# MVP]
<[e-mail]:

Why not just encrypt the license file contents and have your program itself
do the decryption at runtime from the supplied license file?

--Peter
"Inside every large program, there is a small program trying to get out."http://www.eggheadcafe.comhttp://petesbloggerama.blogspot.comhttp://www.blogmetafinder.com

"ReneMarxis" wrote:

Hello

i have one question reguarding crypting.
First let me explain what i like to do:
I need to pass some licese files to customers. Everything needs to be
done "offline" which requires
me to send files to the customer that include the license
I like to encrypt the license file in one application and decrypt it
at the customer on an other application.

I did read a little on encryption and did not find any way to do the
following:
Use a private key-pair to encrypt and an public one to decrypt.

Every encryption-methods seem to be build up exactly the way arround:
use public key to encrypt and private to decrypt.
But as the private key also includes the public key, i would end up in
putting the key to encrypt the license in the customer application.
This is something i don't like of course.

Now what i need is not some way to encrypt data so it is not readable
but encrypt it in a way that it is not reproduceable.

Is this something thats achiveable with signed data (signed xml eg.)?

many thanks in advance

_rene

Hello and thanks for your answer :)

I did implement the whole thing using signed xml now and it works
great.
I allready did that before but i attached a keyinfo to the signature
(private) thats why every call to CheckSignature returned true, even
if i changed the input xml to include a completly different signature.
The only thing that had to be correct was the signature.
Now that i do not attach the keyinfo any more, i can generate a new
signkey from just the public key and check the signature with that
key. So no one will be able to generate a license now any more, as you
need the private key to encrypt/sign the data and that is not present
in the client-application