CodeVerge.Net Beta


   Explore    Item Entry   Register  Login  
Microsoft News
Asp.Net Forums
IBM Software
Borland Forums
Adobe Forums
Novell Forums




Can Reply:  No Members Can Edit: No Online: Yes
Zone: > NEWSGROUP > Asp.Net Forum > starter_kits_and_source_projects.microsoft_application_blocks Tags:
Item Type: NewsGroup Date Entered: 7/6/2004 3:43:59 PM Date Modified: Subscribers: 0 Subscribe Alert
Rate It:
NR
XPoints: N/A Replies: 0 Views: 39 Favorited: 0 Favorite
1 Items, 1 Pages 1 |< << Go >> >|
danroot
Asp.Net User
Encryption- Where to store the keys?7/6/2004 3:43:59 PM

0

One thing that's always puzzled me about implementing encryption is where to store the keys. The CMAB demos show that you include them in the configuration file, but this would seem to defeat the purpose. If someone obtained the configuration file, they would only need to download CMAB to decrypt it.

Storing them hard-coded in the app is just as bad, since it can be disassembled. Obsfucation could help, but the string would still be obtainable.

So, my question is, how should encryption keys be handled in the CMAB? Am I missing something fundamental?
1 Items, 1 Pages 1 |< << Go >> >|


Free Download:

Books:
Public key cryptography: Second International Workshop on Practice and Theory in Public Key Cryptography, PKC'99, Kamakura, Japan, March 1-3, 1999 : proceedings Authors: Hideki Imai, Yuliang Zheng, Pages: 326, Published: 1999
Professional SQL Server 2005 Administration Authors: Brian Knight, Ketan Patel, Wayne Snyder, Jean-claude Armand, Ross Loforte, Brad McGehee, Steven Wort, Haidong Ji, Joe Salvatore, Pages: 735, Published: 2006
Effective Oracle Database 10g Security by Design Authors: David Knox, Pages: 512, Published: 2004
Visual basic 2005 recipes: a problem-solution approach Authors: Todd Herman, Allen Jones, Matthew MacDonald, Rakesh Rajan, Pages: 664, Published: 2007
Information Security Management Handbook Authors: Harold F. Tipton, Micki Krause, Pages: 0, Published: 2007

Web:
Encryption Keys: Basic Concepts For decryption he only need to indicate directory where he store encryption keys and the appropriate key will be found automatically;, 2. ...
How to manage encryption keys The Federal Information Processing Standard (FIPS) 140-2 Level 3 standard requires that the systems used to store encryption keys be physically secure, ...
Encryption Key Management Aug 22, 2007 ... This article is about Encryption key management, and will highlight what needs to be done to effectively store the keys to your encrypted ...
Unlocking best practices for successful encryption key management Feb 20, 2007 ... Even if an administrator would be able to steal a copy of the database used to store the encryption keys, he or she would not be able to use ...
Database Encryption for Application Development - Cisco Systems Hide the key in the code. If you must store the database credentials and the encryption key on the same server (and you probably do, if you are deploying an ...

RSA File encryption/decryption using C#... - ng.asp-net-forum.security i can able to perform normal string encryption/decryption using RSA. ... concentrates on RSA/DES file encryption and storing/loading keys . ...
How to use the same key for Rijndael Decrypt? - ng.asp-net-forum ... I can sucessful to encrypt+decrypt data using Rijndael in the same ... Currently , you are generating random key and initialization vector. .... i too have, the old "there is a problem with your selected data store. ...
Failed to decrypt using provider ... If my memory does not fail me looks like you are missing on the configuration file the key to use to encrypt the data. ...
Simple Encrypting & Decryption for password.aspx - ng.asp-net ... A good idea is to store them in a text file that you bury under many layers of ... The /// derived password will be used to generate the encryption key. ...
RSACryptoServiceProvicder can't access private keys under ... Encrypt(System.Text.Encoding.Unicode.GetBytes(data), false); ... NET code is actually runing as should have rights over the key store so that the key/pair ...

Videos:
Covert Surfer - Secure Anonymous Internet Browsing Covert Surfer http://www.surfthewebsecretly.com/ Download Covert Surfer Free 5-Day Trial At: http://www.surfthewebsecretly.com ...
Fingerprint reader, Fingerprint computer access control ... How to avoid remembering the boring but necessary passwords ? How to avoid losing the personal/business data of a large chunk ? Say ...
Seattle Conference on Scalability: maidsafe: A New Networki Google Tech Talks June 14, 2008 ABSTRACT This paper presents a significant new way of networking and data handling globally. This data ...
Fingerprint USB flash drive: Fingerzen computer lock- cs ... E-ser Technology Development Co., Ltd. is a professional storage and security products manufacturer. Over the years, we developped dozens of ...
SNW IBM Booth Spring 2008 - Andy Monshaw Keynote A brief clip of Andy Monshaw's keynote speech at Storage Networking World on Wednesday, April 9th. Andy touched on many key storage issues today ...












close connection using executedataset

updatedataset method of the new data application block

file dependency implementation

raiserror() on store procedures

uip won't navigate from start page

microsoft data access application block....sqlhelper class problem

data access application block with access 97

emab in n tier application

enterprise library data access block (bug?)

new to vstudio, want to use daab

how does it work?

why am i getting this error with the enterprise library data access block

using daab without vs.net

using transactions in enterprise library

daab oracle exception

general question

problem with custom configuration handler

cmab and development vs production configurations

database.createdatabase blows up.

enterprise library 1.x security application block - how to query active directory using c#

retrieving a blob from oracle using ms enterprise library 3.1

courses to take (.net) to create web applications with sql 2000 access?

enterprise library for .net framework 2.0 security problem.

logging application block: its it asynchronous?

how to log and send email alerts when an exception is caught using enterprise library?

the specified type is abstract

warning: error in the code in the data application block (c# version)

migrating of enterpriselibrary project from 1.1 to 2.0

user/server control exception

where can i get daab 3.0 (3.1)

 
Search This Site:

 
  Privacy | Contact Us
All Times Are GMT