WRS resource

Posted By: rojart

WRS resource - 10/22/13 08:23

Would be great to provide an Optional archive encryption with WRS resource packer using AES-192 or AES-256, except of source code the rest can very easily be decompressed.

Thanks in Advance!
Posted By: MasterQ32

Re: WRS resource - 10/22/13 10:00

In Lite-C there should be no source code in the WRS at all, because it's all precompiled.
Posted By: Feindbild

Re: WRS resource - 10/22/13 10:51

It will be decrypted in RAM anyways, so for one the key has to be saved somewhere and could be read from there, or the wanted assets could just be dumped from RAM.
DRM does not and will never work.
Posted By: WretchedSid

Re: WRS resource - 10/22/13 18:02

We know.
However, licenses for models like from Dexsoft usually require a certain encryption. No one ever talks about the strength of the encryption or that you should use a peer reviewed implementation that doesn't fall apart from the first side channel attack, but that's why they are artists in the first place wink

Speaking of, AES-192 and AES-256 implementations in shipping software requires you to have approval from the Unites States (the BIS to be specific) and that you annually report to two US government agencies (every January), at least if you want to export your software from the US (read: If your program comes from an US server, even if you are a citizen of the EU, you need an ERN authorization).

Further reading: http://www.bis.doc.gov/index.php/policy-guidance/encryption/identifying-encryption-items

tl;dr: Cryptography stops being fun once you realize that the United States Government is part of the world
(hey, want to hear a fun story? When I had a layover in the US (read: I never left the airport!) two weeks ago, I had to leave fingerprints of all of my fingers, had a picture of me taken and my luggage searched. At least I got a few Department of Homeland Security stickers on some of my stuff)
Posted By: FBL

Re: WRS resource - 10/22/13 21:05

If it's about artwork of artists I guess the goal usually is to make their work non directly reusable.
Means you won't need a super duper bulletproof encryption, but just something that makes sure the artowrk cannot be used out of the box by anyone having installed your game (like it is possible without WRS).
Some shabby byte twister thing and add_buffer() should do.
Posted By: rojart

Re: WRS resource - 10/24/13 07:25

Afaik is the Advanced Encryption Standard free to use.

Quote:
... Der Algorithmus ist frei verfügbar und darf ohne Lizenzgebühren eingesetzt, sowie in Soft- und Hardware implementiert werden...

But i've some other ideas to secure it in 99.99%
Posted By: WretchedSid

Re: WRS resource - 10/24/13 07:43

It's not about licensing but about export restrictions. Huge difference.
Posted By: rojart

Re: WRS resource - 10/26/13 18:47

That means if i'll export it from my server in Germany it would be free, right?
Posted By: WretchedSid

Re: WRS resource - 10/26/13 23:16

It's free either way. But yes, you are not bound by US export laws in Germany.
However, the second you switch to an US based server, or actually are a US citizen, you are fall under their restriction and export laws.

I don't think putting AES wrs resource support into Gamestudio is a good idea, for that specific reason: Gamestudio has a lot of people from the states using it, and there is a Conitec office in the states as well, which I don't know how much it is involved in Gamestudio... IANAL, but so aren't most Gstudio users, and I don't think it's in Conitecs interest to get US users, or people with servers in the US, into trouble. I mean, just sell your stuff on the Windows or Android market place, or use Akamai as your CDN: You may end up no longer being allowed entry in the US (or get a bunch of police knocking on your door).

If you want resources protected by AES: Implement it yourself (no, don't. Seriously, don't. Use a crypto library with a known track record). I wouldn't trust an implementation by Conitect to begin with, no offense, and you should be able to just do it yourself using add_buffer() and a wrapper over some crypto library (for example CommonCrypto or OpenSSL)
Posted By: Uhrwerk

Re: WRS resource - 10/27/13 00:16

Just out of curiosity, why would you want to do that?
Posted By: WretchedSid

Re: WRS resource - 10/27/13 03:36

Do what exactly?
Posted By: Anonymous

Re: WRS resource - 10/27/13 04:44

I'm not even sure how to understand the idea of including encryption in a game(an exempt entertainment product) would end in a person barred from entering the USA and having a SWAT team at their door. So I am figuring this is a joke that I just don't get?

Quote:
Note 4: Category 5, Part 2 does not apply to items incorporating or using "cryptography" and meeting all of the following:

(a) The primary function or set of functions is not any of the following:
(1) "Information security";
(2) A computer, including operating systems, parts and components therefor;
(3) Sending, receiving or storing information (except in support of entertainment, mass commercial broadcasts, digital rights
management or medical records management); or
(4) Networking (includes operation, administration, management and provisioning);
(b) The cryptographic functionality is limited to supporting their primary function or set of functions; and
(c) When necessary, details of the items are accessible and will be provided, upon request, to the appropriate authority in the exporter’s
country in order to ascertain compliance with conditions described in paragraphs (a) and (b) above.


Maybe it is my lack of knowledge But this says encryption for this purpose is not controlled and (part (c)) That you verify it is truly exempt - you are just showing them that you are using a standard encryption method to lock models, art,sound, ect - otherwise know as storing information for entertain products. There must be something I don't understand.

Posted By: Uhrwerk

Re: WRS resource - 10/27/13 17:44

Originally Posted By: JustSid
Do what exactly?

"Enrich" the wrs format with an en-/decryption algorithm. WRS isn't human readable in the first place. Encrypting game data is pointless anyways as you have to provide the key for the data at the same time. It's like securing your house with an ultra safe lock and then duct-taping the key for it right next to it to the front door.
Posted By: Quad

Re: WRS resource - 10/28/13 08:59

Maybe they just want slower loading times because of the time it takes for decryption? grin
© 2024 lite-C Forums