Re: Key Management

On 2014-09-25 03:54, Peter Gutmann wrote:
> TM <[email protected]> writes:
>
>> So it is no possibility to pass key.p15 without to write it temporary to some
>> disk...
>
> Both PGP keyrings and PKCS #15 keysets are effectively database formats, by
> storing the file inside a database you're storing a database inside a database
> (just out of interest, why are you doing this?).

Project has to level of digital signature intern with intern CA and 
extern which uses commercial qualified signature.

I am trying to implement intern one, with "safe" way to keep private key 
without possibility to write key to hard disk.
This is multiuser environment where access to windows is "per machine" 
designed (pc account). Don't ask me why.
My software has "per user" accounts. Thus there is no safe way to keep 
private key file isolated only for one user in a folder on disk. I must 
keep it in database on server, in an encrypted blob - where password is 
user password (hash) plus ev. salt.
This is for so called intern digital signature. Exported documents 
should by sign by qualified signature with private key on smartcard.

If you really want to do
> this then you need to either write them to a temporary file so they can be
> accessed normally or modify cryptlib so it'll read the data from an in-memory
> buffer. The keyring-read code has support for this (i.e. reading from an in-
> memory buffer), you'd just need to add your own modifications to allow the
> block of memory with the keyset to be accessed this way.

I am using Delphi and already compiled cryptlib , and to be frank, I'm 
not smart enough to rewrite cryptlib code by myself.

Best regards
Tomasz



_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.