PACE Anti-Piracy, Inc. raises the bar in white-box encryption protection for banks, PSPs and payment scheme applications

Banks, payment service providers (PSPs), schemes, and other financial institutions can now benefit from a uniquely high level of sensitive data protection and application attack resistance, following the launch of White-Box Works, a next-generation EMVCo-evaluated White-Box code generator, from PACE Anti-Piracy, Inc.

Unlike traditional solutions, White-Box Works gives the customer complete and independent control over their protected code, thereby ensuring their encryption keys and proprietary algorithms never leaves the customer’s premises.

Enhanced flexibility, security, and efficiency

White-Box Works can transform any C-code into a protected white-box variant in a single step

White-Box Works can transform any C-code into a protected white-box variant in a single step, offering unparalleled flexibility, security, and efficiency. This level of in-house control also promises to increase operational efficiency for the customer, since they are no longer beholden to a white-box library vendor’s build schedule and can develop their application, in accordance with their internal schedules.

White-Box Works also enables the customer to use, replace and update their deployed encryption keys, and algorithms at will, with no need to re-engage PACE Anti-Piracy, or any other third-party vendor, to do so.

White-Box Works

White-Box Works has been designed to defeat a variety of sophisticated attacks, including those involving reverse engineering, fault injection, and advanced statistical analysis, such as Differential Computation Analysis.

White-Box Works outputs code that has been designed to defeat a range of attacks, to which many encryption-dependent financial apps remain vulnerable, including, for example, those supporting mobile payments, digital identity, self-service retail, and soft POS use-cases.

Achieved EMVCo SBMP security evaluation certificate

White-Box Works, developed by PACE Anti-Piracy, Inc., has also achieved the EMVCo Software-Based Mobile Payment (SBMP) security evaluation certificate, following a successful EMVCo SBMP evaluation, which was conducted by global security lab, Riscure.

Allen Cronce, the Chief Executive Officer (CEO) of PACE Anti-Piracy, Inc., said “Statistical Analysis attacks are the bane of all white-box encryption protection solutions. We are very proud to be equipping the financial services industry with a solution that is capable of addressing these and other vulnerabilities.”

Major step forward in the encryption protection space

White-Box Works represents a significant step forward in the encryption protection space"

Allen Cronce adds, “White-Box Works represents a significant step forward in the encryption protection space and will give banks, PSPs, schemes, and other financial sector users greater confidence, in the security of their sensitive data. We’re also delighted to accompany the launch with news of White-Box Works’ EMVCo SBMP evaluation certificate and are grateful to Riscure’s talented penetration testers. The entire Riscure team has been a pleasure to work with, throughout the rigorous EMVCo evaluation process.”

Maarten Bron, the Managing Director of Riscure North America, said “Riscure is proud to have assisted PACE Anti-Piracy in achieving an EMVCo SBMP evaluation certificate for White-Box Works.”

Unique security capability for solution developers

Maarten Bron adds, “This innovative technology provides a unique security capability for solution developers, as it supports the creation of white-box instances for any algorithm, allowing for optimal flexibility and developer freedom, when the protection of cryptographic keys is vital. This makes White-Box Works not only useful in payments, but also in other fields, such as digital rights management, eHealth, IoT (Internet of Things), automotive and more.”

PACE Anti-Piracy, Inc.’s Chief Executive Officer (CEO) Allen Cronce stated, “It’s also noteworthy that White-Box Works was evaluated as a stand-alone technology and did not require the additional protection of binary hardening, and tamper-proofing technology, to receive an EMVCo security evaluation certificate. I believe this is another industry first for White-Box Works. It’s an unmatched achievement that we are immensely proud to highlight.”