Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with key
Search options answers only
not deleted
user 61443
Physical or digital keys. Digital keys are used for encryption or signing, or for authentication (e.g. API key). For product keys, use the tag product-key.
7
votes
Why should I hide API keys?
Is the effort of protecting the key worth the risk? That's up to you. … Your response would probably be something like:
scramble to implement better API key protection in your app
publish a security update to the Play Store with a new API key
revoke the old one. …
- 59.3k
4
votes
How to securely store API keys
Manual access
By this I mean that they key is only needed when there is a human at the keyboard. … This scenario is fairly easy to solve: for example you could encrypt the key with a user-entered password. …
- 59.3k
4
votes
Accepted
If PGP is 2048 or 4098, then what is 128-bit encryption?
There are two different concepts at play here:
Key Size is the size of a key on disk, measured in bits. For RSA encryption you tend to see key sizes like 2048 bit, 4096 bit, etc. … Key Strength is a measure of how much computation an attacker needs to do to break your key (ie compute the private key from the public key). …
- 59.3k
3
votes
Why is an HSM required to protect CA certificates (rather than a regular USB token)?
[This is speculation based on vendor website -- I have no direct experience with these devices]
My speculation is that a specialized HSM version of the device is not required, but since it is designe …
- 59.3k
2
votes
is it possible to extract a "hint hash" of some kind from another hash?
You want a scheme where, given only the hash values, you can compute whether two hashes refer to the same user or not. This is a rather complex question, so it has a rather complex answer. First, let' …
- 59.3k
2
votes
Keeping software signing keys secure
Avoid prompting the user for a password by doing some weird obfuscation trick where you derive a decryption key from hardware serial numbers and stuff.
Use the OS' key management APIs. … Then you can trust that the OS is handling the key securely and you don't have to think about it.
Fortunately for you, Windows and .NET has very good key management APIs called CAPI: Crypto API. …
- 59.3k