Questions tagged [key-management]

93 questions
3
votes
1 answer

How to store the AES Rijndael generated Key to the database?

When creating the instance, the KEY and IV are generated for me. RijndaelManaged myRijndael = new RijndaelManaged(); How can I store the Key in my database or web.config file? And in what format? Because I will have to load the key when trying to…
Blankman
2
votes
1 answer

Diffie-Hellman Key exchange with four parties

I'm trying to modify an example Diffie-Hellman key exchange between three parties. Here is the Code. // Alice uses Carol's public key Key ac = aliceKeyAgree.doPhase(carolKpair.getPublic(), false); // Bob uses…
Chulbuli
  • 23
  • 6
2
votes
1 answer

Unattended/automated Linux device key management (certs for accessing update servers)

I am currently working on a customized media center/box product for my employer. It's basically a Raspberry Pi 3b+ running Raspian, configured to auto-update periodically via apt. The device accesses binaries for proprietary applications via a…
Untha
  • 21
  • 3
2
votes
1 answer

Generating a unique encryption key or salt per app installation

I'm working on the topic on how to securely store sensitive data on an Android device. Of course there's no 100% secure method, I'd like to get as secure as possible. I've read through the official recommendations. Just as an example, I have an app…
2
votes
1 answer

Password encryption techniques and secure key transfer using AngularJS and .net

I have an application which uses AngularJs 1.5 as front end and .net framework as a backend. In my application, I have to store username and password on the database which comes from the front end.The requirement is: AngularJs will encrypt the…
2
votes
0 answers

Handling encryption keys

I've got a small app I wrote that takes a user-created, symmetric encryption key to encrypt files, and am unsure of how to work with the key inside the program. To be clear, I don't want to store this key anywhere permanently, but obviously I need…
Astrum
  • 591
  • 3
  • 12
  • 25
2
votes
0 answers

How is it possible to have MySQL Keyring plugin to connect to AWS KMS services?

I'm trying to find a solution where I can leverage MySQL Keyring plugin to activate the data at rest encryption for InnoDB but using AWS Key Management system. I found a similar plugin for MariaDB but I cannot find the same thing for…
2
votes
0 answers

Confusion on the usage of add_key (Linux Key Management) interface

I need to store some crypto keys in the kernel where each key is related to a path on the disk. A restricted set of users can create files on such a path but the crypto keys are shared by all such user. I am thinking of using linux kernel key…
ghostkadost
  • 502
  • 4
  • 14
2
votes
2 answers

Key handling for Java Encrypter

In my Java based web-app I would like to encrypt some data before it is written to DB and decrypt it once loaded back to memory. To do that I used bouncycastle API and created a class that looks like this: public class BlowfishEnrypter implements…
forhas
  • 11,551
  • 21
  • 77
  • 111
1
vote
0 answers

Alternatives for KeyManager & JKSKeyManager in Spring-Security-SAML2-Service-Provider 6.1.3?

I am currently working on a project that makes use of Spring's SAML2 security module. The project is using an older, end-of-life version, spring-security-saml2-core 1.0.10.RELEASE. As part of the project's maintenance and to keep the dependencies…
Sid
  • 11
  • 2
1
vote
2 answers

How to correctly store user secrets in a frontend Application?

I am building a Web Application where the user's data is end-to-end-encrypted. The web client obviously needs a secret that nobody else knows for end-to-end-encryption to work. I have planned to have the user choose a password and then derive an…
swift-lynx
  • 3,219
  • 3
  • 26
  • 45
1
vote
2 answers

configure multiple git accounts with config file only recognises first GitHub account and ignores second

I'm trying to set up multiple Github.com accounts on my computer. I've followed this tutorial and also this one here. However, I'm having issues. I'm working on the Unbuntu Linux subsystem on windows. My ssh config file is as follows: # personal…
JMcK
  • 100
  • 1
  • 9
1
vote
1 answer

JWE and the key management modes

Wrapping my head around JWE and the key management modes. The point of JWE is to prevent third parties to see/change the token. Only the token issuer and resource server should be able to use it. (Is this correct?) To encrypt the token's payload, we…
whowhenhow
  • 109
  • 1
  • 8
1
vote
1 answer

AWS Signature, Encoding, Verification

I have an POCO that I am generating signature for using AWS KeyManagementService var signResponse= await client.SignAsync(new Amazon.KeyManagementService.Model.SignRequest() { KeyId = "keyid", MessageType =…
americanslon
  • 4,048
  • 4
  • 32
  • 57
1
vote
0 answers

Google Tink Key management and sharing from android to .NET to decrypt data to server end which is encrypted at mobile(client) end

I am trying to make an end to end encrypted app where I encrypt data at the mobile end at the time of sending and we can decrypt it at the server(for user info). but I am not able to find any solution or example for how we can manage or share key…
Deepak
  • 127
  • 4
  • 11