I am creating an web application which processes user information. As a part of application we are storing this input user information and generated output on server. Since this input and output is sensitive, I am encrypting it using AES 128 bit symmetric key for encryption.
I want to manage the key and its rotation policy. Can somebody help me or point me at the key rotation article.
- Where the key should be stored in database or file?
- In case of key rotation should I re-encrypt all old input-output files?
- How should key rotation be achieved?