My app will require maintaining an RSA keypair locally on the user's machine. I was a bit disappointed to discover that PKCS#12 and JKS don't offer higher than 3DES (correct me if I have this wrong). Or feel free to suggest a standard that does.
Are there any immediate concerns to me using my own format? so a model including:
- Encrypted (private) key bytes
- Matching x509 certificate
The encryption of the private key uses an AES key + IV. The AES key is derived from a user entered password and a stored salt using PBKDF2WithHmacSHA512
NOTE: This is just for storing keys, so a certificate-esque format is not essential.