Question

Is simple base64 encoding (for posting binary data to apples validation servers) considered encryption and would I have to report this when uploading my app to the appstore?

Was it helpful?

Solution

I would assume that something like base64 would not be considered encryption, because it is a known encoding algorithm, and has nothing to do with encryption. Base64 encoding is used for lots of different things including encoding things in email. I don't see how anybody would interpret this as encryption.

But then again, Apple has rejected apps for some pretty weird reasons, so if you can disclose to them clearly that you are using base64 to encode data, then it's probably safer to do so upfront, so you can say they were aware of it all along.

OTHER TIPS

No, base64 encoding is not encryption.

The main reason Apple cares: compliance with US export laws. Base64 encoding has never been considered an encryption technology by the NIST/Commerce Department.

As others have said, you never know when you're going to get an arbitrary reviewer, but the direct and simple answer is no. Source: http://csrc.nist.gov/

base64 is an encoding scheme, not an encryption algorithm.

The distinction is, although neither are particularly human-readable, encoding strives to store or display data in a manner consistent with the media at hand, where encryption is a deliberate attempt to obfuscate the data from all but its intended users.

Apple asks about encryption to see if the application may need authorization for export from the Department of Commerce/Bureau of Industry and Security.

Base64 encoding is not considered encryption; it is considered a 'fixed' coding technique in in accord with the Technical Note to 15 CFR part 774, Supplement 1, ECCN 5A002, paragraph a.1, which explains that "Cryptography" for export purposes does not include 'fixed' data compression or coding techniques. The definition of 'fixed' appears at 15 CFR part 772.1.

http://www.bis.doc.gov/encryption/ccl5pt2.pdf

Also, you can call the Department of Commerce/Bureau of Industry and Security at 202-482-0707 and ask about your specific application.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top