Basically, I have a Raspberry Pi that is installed in a car. If the car gets stolen, how can I make sure that the files can't be decrypted?
The Raspberry Pi contains a Python script that records movements in the car. When a sequence is finished, it is then encrypted, so the script has to have access to the encryption key.
The Python script also needs to decrypt the file, because it has to be able to send the sequence to a client via a network in HTTPS. It has to have access to the decryption key.
If the key(s) are hard coded in the script, it will be easy for the stealer to decrypt the files.
Could I use a user password generated key (I have seen some people talking about PBKDF2)? If so, how would it work if the client sends that password via HTTPS to the server (the server being the Raspberry Pi)? The generated key would still need to be stored somewhere, so I don't see how it could help.