Back to PermitCore
Engineering Blog

Thinking out loud about
license management & security.

Technical deep-dives written by engineers, for engineers. No fluff, no marketing — just the real tradeoffs behind building secure software licensing.

SHA-256(plaintext) → HMAC → stored_hash AES-256-GCM PBKDF2 · 600,000 iterations
Security Encryption
June 15, 2026 8 min read

Zero-Knowledge Encryption in Practice: How PermitCore Keeps Your License Keys Secret

What does "zero-knowledge" actually mean in a license management context? We explain the full cryptographic chain — PBKDF2 key derivation, AES-256-GCM encryption, HMAC-SHA256 validation — and why a stolen database can never expose your license keys, even though validation itself passes through the server transiently.

ISV SDK Store Email API
Strategy Licensing
June 8, 2026 6 min read

License Key Distribution: The 5 Models Every Software Vendor Should Know

Perpetual, subscription, floating, node-locked, metered — each model solves a different problem and creates different support headaches. A practical guide to choosing the right model for your product and your customers.

dotnet add package PermitCore.SDK // validate a license key var result = await client .ValidateAsync(key); // result.Valid == true ✓
Tutorial .NET
June 1, 2026 12 min read

Integrate PermitCore with Your .NET Application in 15 Minutes

A step-by-step tutorial: install the SDK, configure the client, validate and activate license keys in C#, handle offline grace periods, and protect your application against key sharing — all with production-ready code.