The emulator for first generation games can be updated via an official Microsoft download burned to CD by the user, though the CDs' content will be encrypted and signed with publickeycryptography.
It would use publickeycryptography to generate and store thousands of publicand private key pairs, one for every app or gadget the user needs to unlock.