There are server programs and client programs.
- Prepare two keys (A, B) for AES.
- The A key creates an encryption table in advance with WhiteboxAes.
- The B key creates a decryption table in advance with WhiteboxAes.
- The client uses the A table, encrypts the data with WhiteboxAES, and sends it to the server.
- The server decrypts and uses the data with the A key using the regular AES library.
- The server encrypts the data using the B key using the regular AES library and sends it to the client.
- The client uses B-tables in WhiteboxAES to decrypt and use the data. In this way, I think the client is secure.
But what if:
Is WhiteboxAES meaningless and dangerous when using methods to generate encryption and decryption tables with one key and use them on the client? For example, isn't it meaningless to use it for SaveData in a client program?