The SafeLogic Blog

You've heard the term 'frenemies' before, right?  You most likely have if you've got kids past middle school, unfortunately.  It's the mash-up of 'friend' and 'enemy' with the distinction defined in the helpful illustration below.

Today's blog post is a public service announcement - Beware of frenemies.  Many of us forget about this life lesson once we are adults and it can really sting.  Frenemies come in several flavors in the business world, but many are friend/competitors.  Maybe these should be called 'frempetitors'.

Our prime example is Samsung and Apple.  They have been engaged in litigation since 2011, and yet Tim Cook's braintrust thought it was a good idea to contract with Samsung to produce A9 processors for the iPhone 6S.  Samsung was even accused of engaging in corporate espionage to displace TSMC, who had been slated for the full order.  Even the most forgiving folks would have to be a little suspicious, right?

Now the kicker - Samsung's version of the A9 chip has been benchmarked for worse heat dissipation and shorter battery life than the alternative version by TSMC.  Was this malicious?  Was Samsung actively trying to undermine the reputation of Apple's new flagship phone?  Popular Apple-centric blog 'Cult of Mac' says maybe they are.  The fact that the two corporate giants have been locked in mortal combat in both the courtroom and for market share automatically throws a shadow on the developing situation.  Despite Apple's public claims that the variance is only 2-3% and it won't affect typical use, Samsung doesn't get the benefit of the doubt, since they are the very definition of 'frempetitors'.  I'd love to hear the internal discussions in Cupertino on the topic.

So why do you care?  Well, we've had a spike lately in inquiries from companies in a specific industry that have been using an encryption product from their frempetitor.  Yes, they licensed a crypto module from [company name redacted] even though they are competing head-to-head against that company's flagship product.  This boggles my mind.  We're not talking about complementary offerings, we're talking about the exact same kind of Apple-Samsung clash of the titans but on a smaller battlefield.  Why would you trust this frempetitor?  It's not like their product is so fantastic that you had no choice. It's certainly not that their pricing was so incredible that you couldn't afford to pass it up.  For comparison's sake, it's not even like they provide FIPS 140-2 validation services, Rapid or otherwise.  This is just a head-scratcher.

What happens when their module isn't working properly or if it is proven to be vulnerable?  Will they step up and patch it in a timely manner?  Or will they prioritize their own products and customers first, and you'll have to wait until they get around to it?

What if your crypto provider pulls your license in an effort to sidetrack your engineering team and cripple your momentum, because you've been taking market share from their primary offering?  Are you prepared to pivot quickly on your competitor's whim?

Would you be concerned that you are relying upon an internal component that was designed by a competitor?  What if it slows down your product's performance?  What if it includes tracking capabilities so that they can monitor your install base?

Paranoid?  Sure, but definitely within the realm of possible.

If you ran a restaurant, you would never purchase your ingredients from a competitive restaurant.  You'd rightfully assume that they would cherrypick the best produce, the best cuts of meat, the proverbial cream of the crop, and leave you the rest.

Would your boss/investors/shareholders/customers give you the benefit of the doubt in these scenarios?  Is choosing to work with a frempetitor ever a justifiable position in retrospect?

Skip the heartache and paranoia.  Don't get stabbed in the back and don't give a competitor the opportunity to be a part of your supply chain.

If you are currently using encryption provided by a company that would stand to gain from your troubles, contact us immediately and we'll help you escape from this dysfunctional relationship.  If you are considering them, please think very carefully about it before you move forward.  I don't promise never to say "I told you so", but I do promise that SafeLogic will be ready to help when you're ready.  Plus, we have better modules, greater compatibility and platform coverage, and RapidCert's lightning fast validation is just the cherry on top.  Choose wisely!