| RincewindTheWiz |
20-07-2004 17:44 |
I think they work on different levels. The first level is a simple algorithm, that creates a very large base of keys to choose from. The check for this simple algorithm is used in the software, so anyone can reverse engineer it and make his own key gen. The trick is, the real keys are most of the time a SUBset of the large collection that the simple algorithm generated. This uses a different algorithm, and this algorithm is closely guarded and never used in the software itself, but is used on the keycheck servers which are controlled by the publishers. So they don't need to keep a huge list of keys, they can just use the second algorithm. It's very very difficult to write a keygen for the second algorithm because 1) you don't have acces to a binary that uses it (it's only on the keycheck servers of the company) and 2) You can't test each key of the first set to see if it's a member of the second set, because almost always the ratio is 1:10000 or even worse, and the only way to check it is using the keycheck servers and believe me they will notice 10000 attempts with invalid keys.
I'm not in the know, but based on what I could gather about it this seems the most likely. Whitelists CAN be used but are very difficult to maintain and to check, even Windows XP does not use whitelists.
All in all I'm pretty much in favour of cd keys, they usually work at deterring pirates and the important thing, they are the LEAST annoying for legal customers.
|