iPhone 应用程序中的 Base64 是否被视为加密?
简单的 base64 编码(用于将二进制数据发布到苹果验证服务器)是否被视为加密?将我的应用程序上传到应用程序商店时是否必须报告这一点?
Is simple base64 encoding (for posting binary data to apples validation servers) considered encryption and would I have to report this when uploading my app to the appstore?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(5)
不,base64 编码不是加密。
No, base64 encoding is not encryption.
苹果关心的主要原因是:遵守美国出口法律。 NIST/商务部从未将 Base64 编码视为加密技术。
正如其他人所说,你永远不知道什么时候你会遇到任意的审稿人,但直接而简单的答案是不。资料来源:http://csrc.nist.gov/
The main reason Apple cares: compliance with US export laws. Base64 encoding has never been considered an encryption technology by the NIST/Commerce Department.
As others have said, you never know when you're going to get an arbitrary reviewer, but the direct and simple answer is no. Source: http://csrc.nist.gov/
base64 是一种编码方案,而不是加密算法。
区别在于,尽管两者都不是特别适合人类可读,但编码力求以与手头媒体一致的方式存储或显示数据,其中加密是故意混淆除目标用户之外的所有数据的尝试。
base64 is an encoding scheme, not an encryption algorithm.
The distinction is, although neither are particularly human-readable, encoding strives to store or display data in a manner consistent with the media at hand, where encryption is a deliberate attempt to obfuscate the data from all but its intended users.
苹果询问加密情况,以查看该应用程序是否需要商务部/工业安全局的出口授权。
Base64编码不被视为加密;根据 15 CFR 第 774 部分、补充 1、ECCN 5A002、a.1 段的技术说明,它被视为“固定”编码技术,其中解释了用于导出目的的“密码学”不包括“固定”数据压缩或编码技术。 “固定”的定义见 15 CFR 第 772.1 部分。
http://www.bis.doc.gov/encryption/ccl5pt2.pdf
此外,您还可以致电商务部/工业安全局:202-482-0707,询问您的具体申请。
Apple asks about encryption to see if the application may need authorization for export from the Department of Commerce/Bureau of Industry and Security.
Base64 encoding is not considered encryption; it is considered a 'fixed' coding technique in in accord with the Technical Note to 15 CFR part 774, Supplement 1, ECCN 5A002, paragraph a.1, which explains that "Cryptography" for export purposes does not include 'fixed' data compression or coding techniques. The definition of 'fixed' appears at 15 CFR part 772.1.
http://www.bis.doc.gov/encryption/ccl5pt2.pdf
Also, you can call the Department of Commerce/Bureau of Industry and Security at 202-482-0707 and ask about your specific application.
我认为像 base64 这样的东西不会被视为加密,因为它是一种已知的编码算法,与加密无关。 Base64 编码用于许多不同的事情,包括在电子邮件中编码。我不明白有人会如何将其解释为加密。
但话又说回来,苹果出于一些非常奇怪的原因拒绝了应用程序,所以如果你可以清楚地向他们透露你正在使用 Base64 来编码数据,那么提前这样做可能会更安全,所以你可以说他们都知道这一切沿着。
I would assume that something like base64 would not be considered encryption, because it is a known encoding algorithm, and has nothing to do with encryption. Base64 encoding is used for lots of different things including encoding things in email. I don't see how anybody would interpret this as encryption.
But then again, Apple has rejected apps for some pretty weird reasons, so if you can disclose to them clearly that you are using base64 to encode data, then it's probably safer to do so upfront, so you can say they were aware of it all along.