I have some data to encrypt on my database and every tenant will have his own database so surely every tenant will have a different key.

I'm searching for the best way to store the key for every tenant.

Web api written using c# .net and I'm planning on using the AESManaged class to encrypt/decrypt the needed data.

  • What do you mean by multiple tenants over here? – Limit Mar 19 '18 at 21:00
  • @Limit It's the concept that every client will have his own database, so every client will have a different key. – bleh10 Mar 20 '18 at 8:47
  • Why are the tenants not responsible for managing their own keys? – Limit Mar 20 '18 at 17:16
  • @Limit I offered the idea to my Project Manager and he didn't like it. Mostly going to store it in a different server (AWS or Azure) – bleh10 Mar 21 '18 at 9:35
  • Storing it on a different server is not really going to make it more secure IMO. Plus, if an attacker knows that you have this architecture, he is more likely to just go after the server and fetch all your keys. – Limit Mar 21 '18 at 11:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.