Questions about the product

[Tim Bernard]

Hello,

I want to have some informations.

I have a software with an licencing system with USB dongle.

I want to improve the system with your product.

My questions :

-Is it only online ? Or the keystore is in one server, and I send mails with certificates to licence the product ?

I'll have to develop a soft to create certificates, and implement decrypting part in the software

-Is it possible to create some timeout certificates.

I'll use an enum with for exemple : 1 - 1 month from today to 3 month.

And randomly choose a date, to ask for a new one.

-Do you receive some messages about crack/hack of the certificate ?

Thanks for your help

[didisoft]

Hi Tim,

I'm not sure that I get the whole use case and you didn't mention what programming language you are using.

I will paste below links from the documentation of the products that I hope will be useful for you to judge for yourself:

The KeyStore can be in a file, or in In-Memory, loaded explicitly from a Stream:

OpenPGP Library for Java

http://www.didisoft.com/java-openpgp/examples/keystore/

OpenPGP Library for .NET

http://www.didisoft.com/net-openpgp/examples/keystore/

The public OpenPGP keys can have expiration time, which can be set either during generation or explicitly:

OpenPGP Library for Java

http://www.didisoft.com/java-openpgp/examples/generate-ecc-openpgp-keys/

OpenPGP Library for .NET

http://www.didisoft.com/net-openpgp/examples/generate-ecc-key/

The expiration time signature in a public key is created with the corresponding private key, and the public key is used only to very its origin. I don't have any evidence that it was hacked, at least for the version 4 keys (post PGP 6.x).

If the above links are not helpful enough for you, please explain with more details each use case and I will try to send you concrete examples.

All the best,

Peter Kalef