Sentinel Hardware Keys Developer's Guide - Customer Connection ...

Tips and Tricks
Contents Glossary Index Troubleshooting
Encrypt Critical Data Used by the Application
All applications at some point require data to operate. Encrypt important
data files or constants used by your program so it will only operate properly
with the Sentinel Key attached.
Verify Data Integrity Using ECC Signing and Verification
ECC is a public key algorithm (uses public and private key pairs) based on
discrete logarithms that are much more difficult to challenge at equivalent
key lengths. You can use the ECC algorithm to implement security checks in
the application as follows:
1. Generate a random message.
2. Call the SFNTSign API function to sign this message using the private
key is stored secretly in the Sentinel Key.
3. Call the SFNTVerify API function to verifies the signature using the
known public key of the token. If the function returns success, the
correct Sentinel Key is assumed to be present.
Sentinel Hardware Keys Developer’s Guide 177