3
$\begingroup$

I am learning white-box cryptography. So far, I find the following historical research or implementations, for examples:

After I read these white-box related information, I have these questions:

  1. All the white-box crypto are designed on symmetric-key algorithms (AES & DES). Is there any asymmetric-key based white-box algorithms?

  2. Many published white-box algorithms had been broken (see my another post). It seems that white-box is not widely adopted by industries. How white-box could be implemented (aka opportunities) in the real industrial applications? For example, protect secrets hardcoded in the non-free code?

  3. What are the latest white-box crypto design/development trends? no matter for academic research or industrial implementation.

|improve this question
$\endgroup$
  • 1
    $\begingroup$ What does a white-box asymmetric encryption algorithm protect? If the encryption key is already public, it's not clear to me what having a white box version of the algorithm would accomplish. $\endgroup$ – Ella Rose♦ Jun 27 at 2:47
  • 1
    $\begingroup$ @ella: maybe use white-box to hide the private key from extraction $\endgroup$ – Li Dong Jun 27 at 3:31
  • $\begingroup$ To do what? In symmetric key crypto, you want to give away a program that has the secret key hardcoded and encrypts messages, so that the program can be used to encrypt, but not to decrypt. With asymmetric crypto, this is possible by definition: you can encrypt with the public key, and it does not help you to decrypt. If you want, you can think of the public key of an asymmetric scheme as a white-box obfuscation of the encryption program with the secret key hardcoded in it, but not extractable from it. $\endgroup$ – Geoffroy Couteau Jun 27 at 11:03
  • 1
    $\begingroup$ White-box is definitely deployed by the industry, you can also buy libraries containing white-box implementations of RSA and elliptic curves cryptography, even if from a purely theoretical standpoint the latter might not make sense. For the latest trends you can take a look at the slides of the workshop cryptoexperts.com/whibox2019 A good paper you didn't mention is ia.cr/2018/049 $\endgroup$ – j.p. Jun 27 at 14:31
  • 1
    $\begingroup$ @LiDong: To my knowledge white-box implementations of RSA and elliptic curves are only commercially availble, i.e., you have to pay for it. I do not know of any open source implementations. $\endgroup$ – j.p. Jun 28 at 5:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.