KR20190135145A - Method for Protecting Information Using White-Box Cryptography Under Web Standard Environment - Google Patents

Abstract

The present invention relates to an information protecting method through a white box encryption in a web standard environment. The method comprises: a first step of allowing a server to collect browser identification information; a second step of allowing the server to generate and store a secret key based on the browser identification information and a domain key; a third step of allowing a browser module to generate and store a random key; a fourth step of allowing the browser module to transmit the random key to the server and request a white box encryption table; a fifth step of allowing the server to generate the white box encryption table and DEC (secret keys and random keys) based on the secret key; a sixth step of allowing the server to transmit the white box encryption table and the DEC (secret keys and random keys) to the browser module; a seventh step of allowing the browser module to verify the random key; and an eighth step of allowing the browser module to store the white box encryption table in order to have the same used in the encryption of information to be transmitted when the verification in the seventh step is succeeded. Accordingly, the present invention provides increased safety compared to existing technologies.

Description

Method for Protecting Information Using White-Box Cryptography Under Web Standard Environment}

The present invention relates to an information protection method using a white box encryption method, and more particularly, to protect information with enhanced security by introducing a white box encryption method in cryptographic algorithm and key management in a web standard environment using JavaScript. It's about how.

In the web standard environment, the symmetric key encryption method used to encrypt data on the used script has a disadvantage that the encryption algorithm or the secret secret key may be exposed in the script and memory due to the technical limitations and the environment of the web browser script.

White box encryption technology has been developed in recent years as a technology that can securely store the encryption key by software method, and the encryption key is not exposed even if the encryption algorithm is executed in an untrusted terminal.

An object of the present invention is to provide a method for protecting information with improved security by applying a white box encryption method in a web standard environment.

The present invention relates to a method of protecting information through white box encryption in a web standard environment, comprising: a first step of a server collecting browser identification information; A second step of the server generating and storing the secret key based on the browser identification information and the domain key; A third step of the browser module generating and storing a random key; A fourth step of the browser module sending a random key to a server and requesting a whitebox encryption table; A fifth step of the server generating a white box encryption table and a DEC (secret key, random key) based on the secret key; A sixth step of the server sending a whitebox cryptographic table and a DEC (secret key, random key) to a browser module; A seventh step of the browser module verifying the random key; If the verification of the seventh step is successful, the browser module includes an eighth step of storing the whitebox encryption table for use in encrypting information to be transmitted to the server.

The white box encryption table may be generated based on the secret key and browser identification information.

The method according to the present invention is carried out before the eighth step, and the browser module collects the browser identification information and uses the "information for verifying the browser identification information" included in the white box password table to retrieve the browser identification information. The method may further include a seventh step of verifying.

In accordance with another aspect of the present invention, there is provided a method of protecting information, comprising: a step 9-1 of a server, receiving encrypted information encrypted by a browser module using a white box encryption table; The server may further include a step 9-2 of decrypting the encryption information with the secret key.

In the information protection method according to the present invention, the browser module collects the browser identification information before encrypting using the white box encryption table, and checks "information for verifying browser identification information" included in the white box encryption table. The method may further include a step 10-1 of verifying browser identification information by using the same.

The seventh step may include a seventh step of obtaining an random key by calculating an ENC (DEC (secret key, random key)) using a white box encryption table; Step 7-2 may include comparing the random key obtained in step 7-1 with the random key generated in step 3-1.

According to another aspect of the present invention, an information protection method includes: a first step of a server collecting browser identification information; A second step of the server generating and storing the first secret key and the second secret key based on the browser identification information and the domain key; A third step of the browser module generating and storing a random key; A fourth step of the browser module sending a random key to a server and requesting a whitebox encryption table; A fifth server generating a white box encryption table based on the first secret key, a white box decryption table based on the second secret key, and an ENC (second secret key, DEC (first secret key, random key)) Steps; A sixth step of the server sending a whitebox encryption table, a whitebox decryption table, and an ENC (second secret key, DEC (first secret key, random key)) to a browser module; A seventh step of the browser module verifying the random key; If the verification of the seventh step is successful, the browser module may include an eighth step of storing the whitebox encryption table and the whitebox decryption table for use in encrypting information to be transmitted to the server and decrypting information received from the server.

The white box encryption table may be generated based on the first secret key and the browser identification information, and the white box decryption table may be generated based on the second secret key and the browser identification information.

The present invention according to this aspect is performed before the eighth step, and the browser module collects the browser identification information and uses the "information for verifying the browser identification information" included in the white box encryption table or the decryption table. The method may further include a step 7-1 of verifying the browser identification information.

The present invention according to this aspect includes a ninth step of the browser module transmitting encrypted information obtained by encrypting information using a white box encryption table to a server; The server may further include a tenth step of decrypting the encryption information by using the first secret key.

According to an aspect of the present invention, there is provided a server comprising: an eleventh step of encrypting, by a server, information to be transmitted to a browser module using a second secret key; The browser module may further include a twelfth step of decrypting the encryption information received in the eleventh step by using the white box decryption table.

According to the present invention, the browser module collects browser identification information before encrypting using the white box encryption table, and uses the "information for verifying browser identification information" included in the white box encryption table. The method may further include a 13-13 step of verifying the browser identification information.

Step 7-1 includes obtaining a random key from an ENC (second secret key, DEC (first secret key, random key)) using a white box encryption table and a decryption table; Step 7-2 may include comparing the random key obtained in step 7-1 with the random key generated in step 3-1.

According to still another aspect of the present invention, there is provided a method of protecting information, comprising: a first step of a server collecting browser identification information; A second step of the server generating and storing the secret key based on the browser identification information and the domain key; A third step of the browser module generating and storing a random key; A fourth step of the browser module sending a random key to a server and requesting a white box encryption table and a white box decryption table; A fifth step of the server generating a white box encryption table and an ENC (secret key, random key) based on the secret key; A sixth step of the server sending the white box encryption table, the white box decryption table, and the ENC (secret key, random key) to the browser module; A seventh step of the browser module verifying the random key; If the verification of the seventh step is successful, the browser module may include an eighth step of storing the white box encryption table and the white box decryption table for use in encrypting and decrypting information in the browser.

The white box encryption table and the white box decryption table may be generated based on the secret key and browser identification information.

The present invention according to this aspect is carried out before the eighth step, and the browser module collects the browser identification information and uses the "information for verifying the browser identification information" included in the white box password table to confirm the browser identification information. The method may further include a 7-1 step of verifying.

The seventh step may include: a 7-1 step of decoding a ENC (secret key, random key) using a white box decoding table to obtain a random key; Step 7-2 may include comparing the random key obtained in step 7-1 with the random key generated in step 3-1.

According to the present invention, the browser module collects browser identification information before encrypting using the white box encryption table, and uses the "information for verifying browser identification information" included in the white box encryption table. Step 10-1 to verify the browser identification information; The browser module collects browser identification information before decrypting using the whitebox decoding table, and verifies the browser identification information by using "information for verifying browser identification information" included in the whitebox decoding table. The method may further include step 10-2.

According to the present invention, in the web standard JavaScript environment, the browser module does not have a secret key in a browser module that is relatively easy to expose and attack when a data module is encrypted based on a symmetric key. In the browser module, the encryption / decryption is performed according to the white box encryption method, thereby providing an effect of enhancing security compared to the prior art.

1 is a flowchart of an information protection method according to the present invention;
2 is a flowchart of an information protection method according to another embodiment of the present invention.
3 is a flowchart of an information protection method according to another embodiment of the present invention.

Encryption / decryption may be applied to the information (data) transmission / reception process performed in this specification as necessary, and the expressions describing the information (data) transmission process in the specification and claims are all encrypted / It should be interpreted as including the case of decoding. In this specification, expressions of the form "transfer from A to B (transfer)" or "A receives from B" include those that are transmitted (transmitted) or received with other mediators in between, and directly from A to B. It does not represent only what is transmitted (delivered) or received. In the description of the present invention, the order of each step is to be understood without limitation unless the preceding step is to be performed logically and temporally prior to the later step. In other words, except in the exceptional case described above, even if the process described in the following step is performed in advance of the process described in the preceding step, the nature of the invention is not affected, and the scope of rights should be defined regardless of the order of the steps. In this specification, “A or B” is defined to mean not only selectively indicating any one of A and B, but also including both A and B. In addition, the term "comprising" in this specification has the meaning encompassing further including other elements in addition to the elements listed as containing.

As used herein, the term "module" refers to a logical combination of general-purpose hardware and software that performs its functions.

In this specification, only essential components necessary for the description of the present invention are described, and components not related to the nature of the present invention are not mentioned. It should not be construed in an exclusive sense including only the components mentioned, but in a non-exclusive sense, which may exclude certain components that are not essential or may include other components.

The present invention is performed by an electronic computing device such as a computer capable of electronic calculation, and the mathematical operations and calculations of the steps of the present invention described later are suitable for the known coding method and / or the present invention for performing the calculation or calculation. It can be implemented by computer operation by means of coding designed to be.

And the term "value" is defined herein as a broad concept including not only scalar values but also vectors and matrices, tensors, and polynomials.

In this specification, the meaning of obtaining a predetermined value by performing an operation such as encryption or hashing on a specific value means not only the specific value but also a modified value of the specific value (for example, a predetermined value is further calculated on the specific value or It is defined to include an operation such as encryption or hash on other values calculated through a process of changing the specific value according to a predetermined rule.

1 is a flowchart of an information protection method according to the present invention.

The browser module 10 connects to the server 20 via a communication network (step 100).

The server 20 collects browser identification information (step 105). The browser identification information may include at least one of browser header information and browser fingerprint information.

The server 20 generates and stores a secret key (step 110). The secret key may be generated by using the collected browser identification information and a domain key (identification key assigned to each domain address). If you generate a secret key like that, you can create a unique secret key for a particular browser module and domain.

The browser module 10 generates and stores a random key (step 115). The generated random key is transmitted to the server 20 in step 120, at which time the white box encryption table is also requested. The server 20 generates a white box encryption table and a DEC (secret key, random key) (step 125). The white box encryption table can be generated using a secret key, and DEC (secret key, random key) is a value encoded by a decryption function using a secret key for a random key. The white box encryption table may be generated based on the secret key and browser identification information.

The server 20 transmits the white box encryption table and the DEC (secret key, random key) to the browser module 10 (step 130).

The browser module 10 verifies the DEC (secret key, random key) and the random key (step 135). The specific verification process is as follows. The browser module 10 performs encryption (ENC (DEC (secret key, random key))) for the DEC (secret key, random key) using the white box encryption table received in step 130 to generate a random key. Acquire. The random key is verified by comparing whether the obtained random key is identical to the random key generated and stored in step 115.

If browser identification information was used to generate the white box password table, the browser identification information verification may be performed in step 135. The browser module 10 collects the browser identification information and performs verification using "information for verifying the browser identification information" included in the white box encryption table.

If the random key verification (and browser identification information verification) succeeds, the browser module 10 stores the whitebox encryption table (step 140). The whitebox password table may be stored in the domain local storage.

The browser module 10 encrypts the information using the white box encryption table (step 145). The encrypted information can be stored in the memory or storage area of the browser.

If browser identification information is used to generate the white box encryption table, the browser identification information verification may be performed prior to encryption. The browser module 10 collects the browser identification information and performs verification using "information for verifying the browser identification information" included in the white box encryption table. If the verification succeeds, white box encryption is performed.

The browser module 10 transmits the encrypted information to the server 20 (step 150). The server verifies the secret key and, if successful, decrypts the encrypted information using the secret key (step 155). The secret key verification is performed by comparing the secret key generated based on the browser identification information and the domain key with the secret key generated in step 110 through the same process as when generated in step 110.

According to the present invention, the server 20 stage follows a symmetric key encryption scheme using a conventional secret key, and the browser module 10 stage follows an encryption scheme using a white box encryption table. Since the browser module 10 is neither delivered nor stored with the secret key, the browser module 10 uses whitebox encryption in a browser module that is more likely to be exposed to hacking attacks to compensate for the weakness of symmetric key encryption in a web standard JavaScript environment. The working effect is provided.

2 is a flowchart of an information protection method according to another embodiment of the present invention.

The browser module 10 connects to the server 20 via a communication network (step 200).

The server 20 collects browser identification information (step 205). The browser identification information may include at least one of browser header information and browser fingerprint information.

The server 20 generates and stores a first secret key and a second secret key (step 210), wherein each secret key uses collected browser identification information and a domain key (identification key assigned for each domain address). Can be generated.

The browser module 10 generates and stores a random key (step 215). The generated random key is transmitted to the server 20 in step 220, at which time the white box encryption table and the white box decryption table are also requested. The server 20 generates a white box decryption table based on the first secret key, and a white box decryption table based on the second secret key, and generates an ENC (second secret key, DEC (first secret key, random key). )) (Step 225). This value first generates a DEC (first secret key, a random key), which is a value encoded with a decryption function using a first secret key for a random key, and then uses a second secret key as a cryptographic function for the value. Calculate the encoded value (make sure this expression is correct).

The white box encryption table may be generated based on the first secret key and browser identification information. The white box decryption table may be generated based on the second secret key and browser identification information.

The server 20 forwards the white box encryption table, the white box decryption table, and the ENC (second secret key, DEC (first secret key, random key)) to the browser module 10 (step 230).

The browser module 10 verifies the ENC (second secret key, DEC (first secret key, random key)) and the random key (step 235). The detailed verification process is as follows. Decryption (ENC (second secret key, DEC (first secret key)) for ENC (second secret key, DEC (first secret key, random key)) using the white box decoding table received at 130 , Random key))) to obtain DEC (first secret key, random key), and encrypt (ENC (DEC (first key) to DEC (first secret key, random key) using a white box encryption table) Secret key, random key))) to obtain a random key.

The random key is verified by comparing whether the obtained random key is identical to the random key generated and stored in step 215.

When browser identification information is used to generate the white box encryption table and the white box decryption table, verification of the browser identification information can be performed. Verification of the browser identification information is similar to that described in the embodiment of FIG.

If the random key verification (and browser identification information verification) succeeds, the browser module 10 stores the whitebox encryption table and the whitebox decryption table (step 240). The whitebox password table and the whitebox decryption table may be stored in the corresponding domain local storage.

The browser module 10 encrypts the information using the white box encryption table (step 245). The encrypted information can be stored in the memory or storage area of the browser.

If browser identification information is used to generate the white box encryption table, the browser identification information verification may be performed prior to encryption. The browser module 10 collects the browser identification information and performs verification using "information for verifying the browser identification information" included in the white box encryption table. If the verification succeeds, white box encryption is performed.

The browser module 10 transmits the encrypted information to the server 20 (step 250). The server verifies the first secret key and the second secret key, and if successful, decrypts the encrypted information using the first secret key (step 255). The secret key verification is performed by comparing the secret key generated based on the browser identification information and the domain key with the secret key generated in step 210 and then stored in the same process as when generated in step 210.

If the server 20 has information to send to the browser module 10, it encrypts using the second secret key (step 260). Information encrypted by the second secret key at the server is passed to the browser module 10 (step 265).

The browser module 10 decodes the received information using the white box decoding table (step 270).

If browser identification information is used to generate the white box decoding table, the browser identification information verification may be performed prior to decryption. The browser module 10 collects browser identification information and performs verification using "information for verifying browser identification information" included in the white box decoding table. If the verification succeeds, white box decryption is performed.

3 is a flowchart of an information protection method according to another embodiment of the present invention.

The browser module 10 connects to the server 20 via a communication network (step 300).

The server 20 collects browser identification information (step 305). The browser identification information may include at least one of browser header information and browser fingerprint information.

The server 20 generates and stores a secret key (step 310), and the secret key may be generated by using the collected browser identification information and a domain key (identification key assigned to each domain address). If you generate a secret key like that, you can create a unique secret key for a particular browser module and domain.

The browser module 10 generates and stores a random key (step 315). The generated random key is transmitted to the server 20 in step 320, and the white box encryption table and the decryption table are also requested. The server 20 generates a white box encryption table, a white box decryption table, and an ENC (secret key, random key) (steps 325 and 330). A white box encryption table and a decryption table can be generated using a secret key, and ENC (secret key, random key) is a value encoded by a secret function using a secret key for a random key. The white box encryption table and decryption table may be generated based on the secret key and browser identification information.

The server 20 transmits the white box encryption table and the DEC (secret key, random key) to the browser module 10 (step 335).

The browser module 10 verifies the ENC (secret key, random key) and the random key (step 340). The specific verification process is as follows. The browser module 10 decrypts the ENC (secret key, random key) using the white box decoding table received in step 335 to obtain a random key. The random key is verified by comparing whether the obtained random key is identical to the random key generated and stored in step 115.

If browser identification information is used to generate the white box encryption table and the decryption table, the browser identification information verification may be performed in step 340. The browser module 10 collects the browser identification information and performs verification using "information for verifying browser identification information" included in the white box encryption (decryption) table.

If the random key verification (and browser identification information verification) succeeds, the browser module 10 stores the whitebox encryption table and decryption table (step 345). The whitebox password table and the decryption table may be stored in the corresponding domain local storage.

The browser module 10 encrypts the information using the white box encryption table (step 350). The encrypted information can be stored in the memory or storage area of the browser.

If browser identification information is used to generate the white box encryption table, the browser identification information verification may be performed prior to encryption. The browser module 10 collects the browser identification information and performs verification using "information for verifying the browser identification information" included in the white box encryption table. If the verification succeeds, white box encryption is performed.

When the browser module 10 tries to use the encrypted and stored information, the browser module 10 performs decryption using the white box decryption table (step 355).

If browser identification information is used to generate the white box decoding table, the browser identification information verification may be performed prior to decryption. The browser module 10 collects browser identification information and performs verification using "information for verifying browser identification information" included in the white box decoding table. If the verification succeeds, white box decryption is performed.

According to the present invention, the use of whitebox encryption and decryption in a browser module that is relatively exposed to a hacking attack provides an effect that can compensate for the weakness of the symmetric key encryption scheme in a web standard JavaScript environment.

According to the present invention, in a web standard JavaScript environment, in a symmetric key encrypted communication between a browser module and a server, a browser is maintained with only a secret key at the server side without having a secret key in a browser module that is relatively easy to expose and attack. In the module, encryption / decryption is performed according to a white box encryption method, thereby providing an effect of enhancing security compared to the prior art. In addition, by applying a model that combines white box and browser identification information, it is possible to protect against man-in-the-middle attack, which is a weak point in public key-based key exchange such as RSA.

While the invention has been described above with reference to the accompanying drawings, the scope of the invention is determined by the claims that follow, and should not be construed as limited to the embodiments and / or drawings described above. And it should be clearly understood that improvements, changes and modifications apparent to those skilled in the art of the invention described in the claims are included in the scope of the present invention.

10: browser module
20: server

Claims (18)

In a method of protecting information through white box encryption in a web standard environment,
A first step of the server collecting browser identification information,
A second step of the server generating and storing the secret key based on the browser identification information and the domain key,
A third step of the browser module generating and storing a random key;
A fourth step of the browser module sending a random key to the server and requesting a whitebox encryption table;
A fifth step of the server generating a white box encryption table and a DEC (secret key, random key) based on the secret key,
A sixth step of the server sending a whitebox cryptographic table and a DEC (secret key, random key) to the browser module,
A seventh step of the browser module verifying the random key,
An eighth step in which the browser module stores the whitebox password table for use in encrypting information to be sent to the server upon successful verification of the seventh step,
How to protect information with white box encryption in a web standard environment.
The method according to claim 1,
The white box password table is generated based on the secret key and browser identification information.
How to protect information with white box encryption in a web standard environment.
The method according to claim 2,
Step 7-1 performed before the eighth step, wherein the browser module collects the browser identification information and verifies the browser identification information using the "information for verifying the browser identification information" included in the white box encryption table. Further comprising,
How to protect information with white box encryption in a web standard environment.
The method according to claim 1 or 2,
Step 9-1, wherein the server receives the encrypted information encrypted by the browser module using the white box encryption table;
The server further includes a step 9-2 of decrypting the encryption information with the secret key,
How to protect information with white box encryption in a web standard environment.
The method according to claim 2 or 3,
The browser module collects the browser identification information before encrypting it using the whitebox password table, and verifies the browser identification information using the "information for verifying browser identification information" included in the whitebox password table. Further comprising 10-1 steps
How to protect information with white box encryption in a web standard environment.
The method according to claim 1 or 2,
The seventh step is
Step 7-1 of calculating ENC (DEC (secret key, random key)) using the white box encryption table to obtain a random key,
Comprising a 7-2 step of comparing the random key obtained in the step 7-1 and the random key generated in the third step,
How to protect information with white box encryption in a web standard environment.
In a method of protecting information through white box encryption in a web standard environment,
A first step of the server collecting browser identification information,
A second step of the server generating and storing the first secret key and the second secret key based on the browser identification information and the domain key,
A third step of the browser module generating and storing a random key;
A fourth step of the browser module sending a random key to the server and requesting a whitebox encryption table;
A fifth server for generating a white box encryption table based on the first secret key, a white box decryption table based on the second secret key, and an ENC (second secret key, DEC (first secret key, random key)) Steps,
A sixth step in which the server sends the white box encryption table, the white box decryption table, the ENC (second secret key, DEC (first secret key, random key)) to the browser module;
A seventh step of the browser module verifying the random key,
If the verification in the seventh step is successful, the browser module includes an eighth step of storing the whitebox encryption table and the whitebox decryption table for use in encrypting information to be transmitted to the server and decrypting information received from the server.
How to protect information with white box encryption in a web standard environment.
The method according to claim 7,
The white box encryption table is generated based on the first secret key and the browser identification information, and the white box decryption table is generated based on the second secret key and the browser identification information.
How to protect information with white box encryption in a web standard environment.
The method according to claim 8,
Performed before the eighth step, the browser module collects the browser identification information and verifies the browser identification information by using the " information that can verify the browser identification information " included in the white box encryption table or the decryption table. Further comprising step 7-1,
How to protect information with white box encryption in a web standard environment.
The method according to claim 7 or 8,
A ninth step of the browser module transmitting the encrypted information encrypted with the information using the white box encryption table to the server;
A tenth step of the server decrypting the encrypted information using the first secret key,
How to protect information with white box encryption in a web standard environment.
The method according to claim 10,
An eleventh step of the server encrypting the information to be transmitted to the browser module using the second secret key and transmitting the encrypted information to the browser module;
The browser module may further include a twelfth step of decrypting the encryption information received in the eleventh step by using the whitebox decryption table.
How to protect information with white box encryption in a web standard environment.
The method according to claim 10,
The browser module collects the browser identification information before encrypting using the whitebox password table, and verifies the browser identification information by using the "information for verifying browser identification information" included in the whitebox password table. Further comprising step 13-1,
How to protect information with white box encryption in a web standard environment.
The method according to claim 7 or 8,
The seventh step is
A step 7-1 of obtaining a random key from an ENC (second secret key, DEC (first secret key, random key)) using a white box encryption table and a decryption table,
Comprising a 7-2 step of comparing the random key obtained in the step 7-1 and the random key generated in the third step,
How to protect information with white box encryption in a web standard environment.
In a method of protecting information through white box encryption in a web standard environment,
A first step of the server collecting browser identification information,
A second step of the server generating and storing the secret key based on the browser identification information and the domain key,
A third step of the browser module generating and storing a random key;
A fourth step of the browser module sending a random key to the server and requesting a white box encryption table and a white box decryption table;
A fifth step of the server generating a white box encryption table and an ENC (secret key, random key) based on the secret key,
A sixth step of the server transmitting the white box encryption table, the white box decryption table, and the ENC (secret key, random key) to the browser module;
A seventh step of the browser module verifying the random key,
If the verification of the seventh step is successful, the browser module includes an eighth step of storing the whitebox encryption table and the whitebox decryption table for use in encrypting and decrypting information in the browser.
How to protect information with white box encryption in a web standard environment.
The method according to claim 14,
The white box encryption table and the white box decryption table are generated based on the secret key and browser identification information.
How to protect information with white box encryption in a web standard environment.
The method according to claim 15,
Step 7-1 performed before the eighth step, wherein the browser module collects the browser identification information and verifies the browser identification information using the "information for verifying the browser identification information" included in the white box encryption table. Further comprising,
How to protect information with white box encryption in a web standard environment.
The method according to any one of claims 14 to 16,
The seventh step is
Step 7-1 of decoding the ENC (secret key, random key) using the white box decoding table to obtain a random key,
Comprising a 7-2 step of comparing the random key obtained in the step 7-1 and the random key generated in the third step,
How to protect information with white box encryption in a web standard environment.
The method according to any one of claims 14 to 16,
The browser module collects the browser identification information before encrypting using the whitebox password table, and verifies the browser identification information by using the "information for verifying browser identification information" included in the whitebox password table. With 10-1 steps,
The browser module collects browser identification information before decrypting using the whitebox decoding table, and verifies the browser identification information by using "information for verifying browser identification information" included in the whitebox decoding table. Further comprising 10-2 steps,
How to protect information with white box encryption in a web standard environment.

Images