166 reputation
8
bio website blog.physionconsulting.com
location Boston, MA
age 34
visits member for 4 years
seen Sep 9 at 21:15

Founder and CEO of Physion


May
26
awarded  Nice Question
Dec
28
awarded  Popular Question
Jan
27
awarded  Teacher
Jan
23
answered Storing private asymmetric key in application binary?
Jan
20
awarded  Scholar
Jan
20
accepted Storing private asymmetric key in application binary?
Jan
19
revised Storing private asymmetric key in application binary?
added 584 characters in body
Jan
19
awarded  Editor
Jan
19
comment Storing private asymmetric key in application binary?
I'm not an appsec expert (obviously), but I've taken a stab at specifying the answers to your questions in my edited question.
Jan
19
revised Storing private asymmetric key in application binary?
added 885 characters in body
Jan
18
comment Storing private asymmetric key in application binary?
yfuhs As Graham says, we could create a keychain, but then the daemon needs to know that keychain's password.
Jan
18
comment Storing private asymmetric key in application binary?
@nealmcb The daemon is started by an init.d script on Linux or a launchd job on OS X. We're operating in a very low IT-budget environment (academia), so I'd like to avoid admin involvement. Obviously, putting the key in an init.d or launchd script/file is probably worse than in the binary, but only marginally so.
Jan
18
comment Storing private asymmetric key in application binary?
@Graham The daemon only needs to read the data, but the encryption is symmetric AES (out of our control).
Jan
18
awarded  Student
Jan
18
asked Storing private asymmetric key in application binary?
Nov
22
awarded  Autobiographer
Nov
22
awarded  Supporter