Solução de criptografia de caixa branca para aplicações JavaScript

Abstract

Nowadays, the JavaScript programming language is one of the most used. JavaScript applications are produced and distributed in all over the world. Therefore, this kind of applications has to be protected against thefts which can break the intellectual property and against malicious tampering. In order to protect JavaScript applications, one of the possible ways is to use encryption. However the encryption has a unique point of failure: the encryption key. If this key is compromised, the application will become easily accessible for potential attackers. The white-box cryptography solutions try to protect the encryption key so that an attacker can not have access to that and, thereafter, the application will have a higher security level. In this document is presented the first white-box cryptography solution for JavaScript applications. This solution fits well in it's environment and the access to the source code of the application has the same relevance that the cryptographic key. Besides that, it's a solution that fights the majors threads of the JavaScript programming language. The white-box cryptography solution will have an anti-tampering mechanism. If an attacker modifies the application, it will not working anymore.