white-box

It's still possible that white-box crypto can provide that level of assurance for some kinds of content.

Taken from here [1]: White-box models: This is the case when a model is perfectly known; it has been possible to construct it entirely from prior knowledge and physical insight.

The problem is that we still don't have enough developed tools to truly analyze internal/white-box code relationships (or perhaps we do, but they're buried in research circles).

It's much cheaper to buy unbranded, white-box multivitamins than gender- or vitamin- specific multivitamins.

Worth mentioning: a big application for white-box crypto is DRM and content protection.

On GNU/Linux, where you work by assembling white-box components, it's not so straightforward.

I wonder how this would fare with a white-box cipher that used standard DPA countermeasures.

I suppose that in the white-box setting there is no guarantee of good randomness, so by zeroing the randomness source similar attacks as this paper's could be mounted.

I've personally seen read/write rates exceeding 800MByte/sec on more or less white-box hardware, at which point it was limited by the underlying storage infrastructure (8Gbit fiber), not the NFS protocols.

It was a sad day when I looked at the HP and IBM white-box models in a store one day and realized that the good keyboards were no longer being made.

For instance, with DRM'd movies, studios are mostly concerned about the new-release window; if it takes 2x the new-release window to break a white-box DRM scheme, the studios are probably fine with that.

Luckily, there's quite a large amount of bleeding-edge research into exactly that: learning "white-box" representations that are understandable and manipulable to human operators.

In 2004 it get much stretchier when Billet broke one of the best known AES white-box schemes; you can google "white box BGE attack" for the details.

Not only that, this transforms any symmetric-key encryption scheme into a public-key encryption scheme---share the obfuscated "white-box" code as the public-key for encryption, and use the deobfuscated code for decryption.

White-box crypto is a neat idea: in essence, it encrypts the implementation of the cipher, transforming straightforward efficient assembly implementations of AES into huge, difficult-to-analyze sequences of instructions that are themselves expressive of a higher-level cipher.