Linked Questions

1
vote
1answer
122 views

How to store encrypted confidential user information in the database, which will need to be decrypted at runtime? [duplicate]

This Question has been reposted from StackOverflow according to the suggestion given in comments I am creating an application where I need to store client's information(Like their API Keys and API ...
1
vote
1answer
145 views

How background services perform token based Api Authentication?

I am implementing JWT token based authentication for our WebAPI in order to restrict data access through the API (e.g. client sends username / password and the api provides a jwt token valid for x ...
1
vote
1answer
251 views

which places are used to store the the encryption key? [duplicate]

So i have an encryption key which i will use to encrypt data or sign data with it. But in order make it possible to ensure the data integrity, i have to keep the key secret. So i thought of spliting ...
1
vote
1answer
90 views

How to use encrypted internal strings and config? [duplicate]

I was reading the CIA leaked documents on wikileaks, I saw in their "best practices" section that it was advised to encrypt all strings and config information and to de-crypt in memory when needed. ...
1
vote
1answer
142 views

Alternative to storing passwords when dealing with integrations that only allow username/password authentication? [duplicate]

I'm working on an integration with an external service that requires per-user authentication, like Facebook for example, but unlike Facebook only allows username+password for this authentication. My ...
1
vote
1answer
951 views

Is it secured to store the encrypted key in the database (encrypted by other cipher)?

I want to improve the encryption flow used by my application. Today I use the AES cipher while its key and its IvBuffer are hardcoded in the code. I know it is not secured and I want to improve this. ...
1
vote
1answer
1k views

Storing data encryption key in the DB. Safe or not?

I'm currently taking over a service and while looking through the DB, I noticed that we encrypt some of our data using a function in the DB where the encryption key is hardcoded in the DB function. ...
1
vote
1answer
212 views

what is the best way to know if the entered decryption key is correct?

I was searching for a way to store the encryption key of AES_ENCRYPT and found a good answer here: Where to store a key for encryption? However, now I am trying to use "Type in the encryption key ...
1
vote
1answer
121 views

Safely encrypting data received through HTTPS

I am receiving sensitive data over an HTTPS connection and need to store this on disk, encrypted so no one can tamper with it, but for reading later on. Each user in the system has a password. The ...
0
votes
1answer
2k views

Php two-way encryption to mysql database [duplicate]

I would like to learn / know how other companies deal with the problem of storing the encryption keys. I want to encrypt the user's email address (and other sensitive information) but (because I want ...
0
votes
1answer
144 views

Storing passwords for personal app [duplicate]

I am currently writing a script on a raspberryPi (in python) to automate some tasks in online accounts. While some of these online accounts have nice APIs I can use, others do not and I have to resort ...
2
votes
0answers
31 views

Which is better for storing private key in .NET - Windows application secure registry or encrypted configuration? [duplicate]

We are building an integration with a third party. We have decided to share a private key with the 3rd party app. What will be the best strategy to allow access for the key? Should the key be saved in ...
1
vote
0answers
33 views

Securing data tokens [duplicate]

What is the proper way to save and access database and API credentials in my node js application? Currently I use a dotenv package and store them in a .env file. I am not uploading my code to github ...
1
vote
0answers
43 views

Encrypt content on Azure without using KeyVault? [duplicate]

Need to store some content in Azure Blob Storage, and want to encrypt prior to storing it on Azure Blob (we don't want to rely on Azure storage encryption on-rest). The issue is we do not want to ...
1
vote
0answers
156 views

How do I securely encrypt and store database encryption keys? [duplicate]

I have a database with encrypted information, and want to encrypt each entry with a different key. Then I want to store the encrypted keys in another database. I know I have to encrypt the keys before ...

15 30 50 per page