views:

414

answers:

5

Is simple base64 encoding (for posting binary data to apples validation servers) considered encryption and would I have to report this when uploading my app to the appstore?

+5  A: 

No, base64 encoding is not encryption.

Alex Reynolds
** Unless Apple says it is.
Alex B
What does that even mean? What a strange comment.
Alex Reynolds
Not the original poster, but here's my take. Apple has rejected some apps for some really arguable reasons. If you are using base64 encoding and apple says that it qualifies as encryption. then it qualifies as encryption. Most people wouldn't say it is, but I've known some people who used it to obfuscate what was being sent over the network, or stored in files. Sure it's not real encryption, but it will stop some people. It will bring the level of reading the text from 1 to 3, whereas real encryption would bring the it up to a level of 100.
Kibbee
I have never heard of Apple rejecting an application for using Base64 encoding. Sounds like FUD to me.
Alex Reynolds
+1  A: 

I would assume that something like base64 would not be considered encryption, because it is a known encoding algorithm, and has nothing to do with encryption. Base64 encoding is used for lots of different things including encoding things in email. I don't see how anybody would interpret this as encryption.

But then again, Apple has rejected apps for some pretty weird reasons, so if you can disclose to them clearly that you are using base64 to encode data, then it's probably safer to do so upfront, so you can say they were aware of it all along.

Kibbee
Unless Apple has rejected an application for using base64 encoding, this is a fairly speculative answer, and therefore of questionable utility. I find it difficult to believe that Apple's developers and testing staff are incapable of distinguishing an encoding regime with one that performs encryption. Were they to make such a mistake, I speculate such behavior would be front page news in most technical forums.
Alex Reynolds
+3  A: 

base64 is an encoding scheme, not an encryption algorithm.

The distinction is, although neither are particularly human-readable, encoding strives to store or display data in a manner consistent with the media at hand, where encryption is a deliberate attempt to obfuscate the data from all but its intended users.

Bob Kaufman
+1  A: 

The main reason Apple cares: compliance with US export laws. Base64 encoding has never been considered an encryption technology by the NIST/Commerce Department.

As others have said, you never know when you're going to get an arbitrary reviewer, but the direct and simple answer is no. Source: http://csrc.nist.gov/

粪便猴子
A: 

What if I am only selling my app in the "USA Store"? Why is anything considered encryption since there are no "export laws".

Gloria