Linked Questions

2
votes
1answer
91 views

Keeping software signing keys secure

I am creating an application that will automatically sign code with secure keys (.key). The app will run on Windows environment developed in .NET environment (C#). Signing is simple: source code + ...
2
votes
2answers
348 views

Using a hash in place of user data

I'm storing client data and they are sensitive about privacy and security of the data. In some cases, I don't need the actual data, but could work with a hash of the data. For example, in the case of ...
2
votes
0answers
31 views

Which is better for storing private key in .NET - Windows application secure registry or encrypted configuration? [duplicate]

We are building an integration with a third party. We have decided to share a private key with the 3rd party app. What will be the best strategy to allow access for the key? Should the key be saved in ...
1
vote
2answers
2k views

How can I safely store a password in a .class file?

I have some .java files containing some password variables, and these variables have values: String password = "xyz"; Now after run, when I open the .class file, it contains those passwords. How can ...
1
vote
1answer
269 views

which places are used to store the the encryption key? [duplicate]

So i have an encryption key which i will use to encrypt data or sign data with it. But in order make it possible to ensure the data integrity, i have to keep the key secret. So i thought of spliting ...
1
vote
1answer
1k views

Is it secured to store the encrypted key in the database (encrypted by other cipher)?

I want to improve the encryption flow used by my application. Today I use the AES cipher while its key and its IvBuffer are hardcoded in the code. I know it is not secured and I want to improve this. ...
1
vote
3answers
223 views

How strong should a database password be?

Seems like a trivial question, but I couldn't find other questions that address the following. So I'm simply asking, how strong would my (super user) database credentials ideally be? I simply figured ...
1
vote
2answers
2k views

How to store an AES Key? an Initialization Vector(IV)?

I'm currently developing an authentication service for our company. I somehow understand how to store a salt used in hashing a password in that it should be stored together with the hashed password. ...
1
vote
1answer
2k views

Storing data encryption key in the DB. Safe or not?

I'm currently taking over a service and while looking through the DB, I noticed that we encrypt some of our data using a function in the DB where the encryption key is hardcoded in the DB function. ...
1
vote
1answer
128 views

Is it secure to store a cryptographic key in a class member variable?

Consider an application that runs locally on a Windows PC. The application uses a local folder for reading/storing encrypted data (i.e. images). A user logs in (authenticated from a local encrypted DB)...
1
vote
1answer
147 views

How to store encrypted confidential user information in the database, which will need to be decrypted at runtime? [duplicate]

This Question has been reposted from StackOverflow according to the suggestion given in comments I am creating an application where I need to store client's information(Like their API Keys and API ...
1
vote
1answer
149 views

How background services perform token based Api Authentication?

I am implementing JWT token based authentication for our WebAPI in order to restrict data access through the API (e.g. client sends username / password and the api provides a jwt token valid for x ...
1
vote
1answer
159 views

Alternative to storing passwords when dealing with integrations that only allow username/password authentication? [duplicate]

I'm working on an integration with an external service that requires per-user authentication, like Facebook for example, but unlike Facebook only allows username+password for this authentication. My ...
1
vote
2answers
154 views

What is the Best Method to Store SQL Host, Username and Password for Multiple Databases?

I have a large project which has multiple web servers (one for each client), one application (for all clients), and multiple SQL databases (one for each client) as pictured below. . For security ...
1
vote
1answer
222 views

what is the best way to know if the entered decryption key is correct?

I was searching for a way to store the encryption key of AES_ENCRYPT and found a good answer here: Where to store a key for encryption? However, now I am trying to use "Type in the encryption key ...

15 30 50 per page