Re: Key Management

TM <[email protected]> writes:

>I am trying to implement intern one, with "safe" way to keep private key
>without possibility to write key to hard disk. This is multiuser environment
>where access to windows is "per machine" designed (pc account). Don't ask me
>why. My software has "per user" accounts. Thus there is no safe way to keep
>private key file isolated only for one user in a folder on disk. I must keep
>it in database on server, in an encrypted blob - where password is user
>password (hash) plus ev. salt. 

But cryptlib key files are encrypted and MAC'd anyway with an iterated salted
hash.  Adding a second layer of encryption isn't going to do much.  In
addition if they're in a database they'll still be written to disk, just as a
database rather than a flat file.

Peter.

_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.