Questions tagged [key-management]
93 questions
3
votes
1 answer
How to store the AES Rijndael generated Key to the database?
When creating the instance, the KEY and IV are generated for me.
RijndaelManaged myRijndael = new RijndaelManaged();
How can I store the Key in my database or web.config file?
And in what format?
Because I will have to load the key when trying to…
Blankman
2
votes
1 answer
Diffie-Hellman Key exchange with four parties
I'm trying to modify an example Diffie-Hellman key exchange between three parties.
Here is the Code.
// Alice uses Carol's public key
Key ac = aliceKeyAgree.doPhase(carolKpair.getPublic(), false);
// Bob uses…

Chulbuli
- 23
- 6
2
votes
1 answer
Unattended/automated Linux device key management (certs for accessing update servers)
I am currently working on a customized media center/box product for my employer. It's basically a Raspberry Pi 3b+ running Raspian, configured to auto-update periodically via apt. The device accesses binaries for proprietary applications via a…

Untha
- 21
- 3
2
votes
1 answer
Generating a unique encryption key or salt per app installation
I'm working on the topic on how to securely store sensitive data on an Android device. Of course there's no 100% secure method, I'd like to get as secure as possible.
I've read through the official recommendations.
Just as an example, I have an app…

GarlicCheese
- 41
- 4
2
votes
1 answer
Password encryption techniques and secure key transfer using AngularJS and .net
I have an application which uses AngularJs 1.5 as front end and .net framework as a backend. In my application, I have to store username and password on the database which comes from the front end.The requirement is:
AngularJs will encrypt the…

Kesiya Abraham
- 753
- 3
- 10
- 24
2
votes
0 answers
Handling encryption keys
I've got a small app I wrote that takes a user-created, symmetric encryption key to encrypt files, and am unsure of how to work with the key inside the program.
To be clear, I don't want to store this key anywhere permanently, but obviously I need…

Astrum
- 591
- 3
- 12
- 25
2
votes
0 answers
How is it possible to have MySQL Keyring plugin to connect to AWS KMS services?
I'm trying to find a solution where I can leverage MySQL Keyring plugin to activate the data at rest encryption for InnoDB but using AWS Key Management system. I found a similar plugin for MariaDB but I cannot find the same thing for…

Thanks for all the fish
- 1,671
- 3
- 17
- 31
2
votes
0 answers
Confusion on the usage of add_key (Linux Key Management) interface
I need to store some crypto keys in the kernel where each key is related to a path on the disk. A restricted set of users can create files on such a path but the crypto keys are shared by all such user. I am thinking of using linux kernel key…

ghostkadost
- 502
- 4
- 14
2
votes
2 answers
Key handling for Java Encrypter
In my Java based web-app I would like to encrypt some data before it is written to DB and decrypt it once loaded back to memory. To do that I used bouncycastle API and created a class that looks like this:
public class BlowfishEnrypter implements…

forhas
- 11,551
- 21
- 77
- 111
1
vote
0 answers
Alternatives for KeyManager & JKSKeyManager in Spring-Security-SAML2-Service-Provider 6.1.3?
I am currently working on a project that makes use of Spring's SAML2 security module. The project is using an older, end-of-life version, spring-security-saml2-core 1.0.10.RELEASE. As part of the project's maintenance and to keep the dependencies…

Sid
- 11
- 2
1
vote
2 answers
How to correctly store user secrets in a frontend Application?
I am building a Web Application where the user's data is end-to-end-encrypted.
The web client obviously needs a secret that nobody else knows for end-to-end-encryption to work.
I have planned to have the user choose a password and then derive an…

swift-lynx
- 3,219
- 3
- 26
- 45
1
vote
2 answers
configure multiple git accounts with config file only recognises first GitHub account and ignores second
I'm trying to set up multiple Github.com accounts on my computer. I've followed
this tutorial and also this one here. However, I'm having issues. I'm working on the Unbuntu Linux subsystem on windows.
My ssh config file is as follows:
# personal…

JMcK
- 100
- 1
- 9
1
vote
1 answer
JWE and the key management modes
Wrapping my head around JWE and the key management modes.
The point of JWE is to prevent third parties to see/change the token. Only the token issuer and resource server should be able to use it. (Is this correct?)
To encrypt the token's payload, we…

whowhenhow
- 109
- 1
- 8
1
vote
1 answer
AWS Signature, Encoding, Verification
I have an POCO that I am generating signature for using AWS KeyManagementService
var signResponse= await client.SignAsync(new Amazon.KeyManagementService.Model.SignRequest()
{
KeyId = "keyid",
MessageType =…

americanslon
- 4,048
- 4
- 32
- 57
1
vote
0 answers
Google Tink Key management and sharing from android to .NET to decrypt data to server end which is encrypted at mobile(client) end
I am trying to make an end to end encrypted app where I encrypt data at the mobile end at the time of sending and we can decrypt it at the server(for user info). but I am not able to find any solution or example for how we can manage or share key…

Deepak
- 127
- 4
- 11