TLDR: Digital.ai has launched its App Sec White-box Cryptography Agent, a new solution designed to simplify and strengthen application security for developers. This agent embeds cryptographic keys within applications using a one-way mathematical operation, making them unextractable and resistant to reverse engineering, even in untrusted environments. The solution is FIPS 140-3 certified and aims to protect mobile, desktop, and server applications against various threats, including Man-at-the-End (MATE) attacks, code lifting, and IP theft. The launch addresses the increasing complexity of cyber threats, including those fueled by AI-powered attacks, and helps enterprises meet stringent compliance requirements like GDPR, HIPAA, and PCI DSS.
Raleigh, NC – September 22, 2025 – Digital.ai, a leading provider of an AI-powered software delivery platform for enterprises, today announced the release of its innovative App Sec White-box Cryptography Agent. This new solution marks a significant advancement in application security, offering developers a simplified yet robust method to harden applications without requiring specialized security expertise. The launch comes at a critical time when cyber threats are escalating in sophistication and volume, driven in part by the pervasive use of artificial intelligence by malicious actors.
The core of Digital.ai’s new offering lies in its white-box cryptography technology, which fundamentally changes how cryptographic keys are protected. Unlike traditional encryption methods where keys can be exposed during runtime or stored insecurely, white-box cryptography transforms keys into ‘white-box’ keys through a one-way mathematical operation. These transformed keys are then intricately blended with the application’s code, making them impossible to extract or use outside their intended library. This ensures that even if an attacker gains access to the application’s runtime environment, they cannot reverse engineer or compromise the embedded keys.
Lou Crocker, Principal Consultant at Digital.ai, emphasized the urgency of adopting advanced encryption in a recent webinar titled ‘The Encryption Mandate: Secure Data or Risk Noncompliance.’ Crocker highlighted that traditional perimeter security is no longer sufficient in an API-centric, mobile-first world where every application and device operates on the same network. The rise of generative AI (GenAI) has further exacerbated the threat landscape, enabling cybercriminals to automate sophisticated attacks, bypass conventional defenses, and exploit applications at scale. Ransomware, social engineering, and data exfiltration remain prevalent, with hackers increasingly targeting entire datasets rather than individual credentials.
Digital.ai’s White-box Cryptography Agent is designed to counter these evolving threats by securing data at its core. The solution is notably FIPS 140-3 certified, meeting military-grade security standards while remaining practical for commercial deployment across various platforms including iOS, Android, Windows, Mac, and Linux. This certification underscores its capability to provide robust protection for sensitive data, such as Personally Identifiable Information (PII), Protected Health Information (PHI), and financial data, thereby helping organizations meet stringent regulatory requirements like GDPR, HIPAA, and PCI DSS.
The technology directly addresses the ‘Man-at-the-End’ (MATE) attacks, a growing vulnerability where attackers reverse engineer app code to discover encryption/decryption keys. By ‘smearing’ app code and keys together, Digital.ai’s solution prevents key copying, redistribution, and subsequent misuse, which could lead to observing data and communications with back-end servers. It supports a comprehensive suite of cryptographic operations, including symmetric encryption (AES, DES), asymmetric encryption (ECC/EG, RSA), secure hashing (SHA-1/2/3, HMAC), signature generation (ECC/DSA, RSA), key wrapping and derivation, BigInteger algebra, and Shamir Secret Sharing.
Also Read:
- New Open-Source Cybersecurity AI Framework Launched to Empower Security Teams
- TeKnowledge Unveils Advanced Security Suite to Fortify Generative AI Implementations
This launch aligns with broader cybersecurity trends, including the adoption of Zero Trust Architectures, where continuous verification is paramount. White-box cryptography complements this by ensuring that even compromised endpoints cannot expose sensitive data. Furthermore, it offers a scalable solution for future-proofing against the potential threats posed by quantum computing. Digital.ai’s commitment to providing peace of mind in an increasingly uncertain digital world is evident in this new offering, empowering Global 5000 enterprises to innovate confidently without compromising security.
