— AVAILABLE SOON —
What it is
KeyNub is a USB-C dongle that your application talks to in order to prove that a license is genuinely present. It is a USB HID device, so there is no driver to install on Windows, Linux or macOS — it works on a locked-down machine and on a customer’s laptop with equal fuss, which is none.
How the protection works
Each dongle holds an ECC P-256 key pair in a hardware secure element. The private key is generated on the chip and cannot be read out of it — not by us, not by anyone holding the dongle. Your application verifies the dongle against a trust root you compile into your own binary, so a substituted device fails the check.
After authentication, your application and the dongle establish an encrypted session (ECDH key agreement, HKDF derivation, AES-256-GCM). Everything after that point is authenticated and encrypted, so a USB capture shows nothing reusable and a replayed recording is rejected.
What you can store on it
- License records — named blobs you write at provisioning time: entitlements, expiry dates, customer identifiers, feature flags.
- Monotonic counters — for activation counts or usage quotas that must not be rolled back.
- Application data encryption — encrypt values your program genuinely needs and cannot compute, then decrypt them through the dongle at runtime. Scope them to one physical dongle, or to any dongle from your batch.
That last one is the difference between a licensing scheme that holds and one that does not. A dongle cannot stop somebody patching your executable, so do not hand them a single boolean to patch. Put the dongle on the critical path instead: encrypt the coefficients, tables, thresholds or keys your software depends on, and without the dongle there is nothing to run rather than a check to bypass. Our SDK documentation shows this pattern in every language.
Integration
The SDK is Apache-2.0 licensed, so you can read it and evaluate the integration effort before you buy anything. One core C library with a stable ABI carries the cryptography, the USB transport and the protocol; the language bindings are thin translation layers on top. Everything is built and tested on Windows, Linux and macOS on every change, against an in-process software dongle that speaks the real protocol — which also means you can develop and run your test suite without hardware plugged in.
C and C++, C#, VB.NET and F#, Python, Java, Delphi, Visual Basic 6, twinBASIC, VBA, MATLAB and Simulink, LabVIEW, Node.js, Go, Rust, Ruby, PHP, Fortran, COBOL, plus Lua, Zig, Julia and Nim. See all supported languages.
No subscription, no cloud
There is no activation server to call, no license server to run, and no recurring fee to us. The dongle is the license. If a customer’s machine has no internet connection — a test cell, a hospital, a factory floor, a secure facility — nothing changes.
Need your own branded version?
KeyNub is available as an OEM platform: your own enclosure, logo, USB VID/PID, custom firmware and dedicated security features, with volume manufacturing. You get hardware licensing under your own brand without building the hardware.
