Cryptography

Simon Connah via Tutor <[email protected]> Wed, 31 Jan 2024 13:06:48 +0000
Newsgroups gmane.comp.python.tutor
Message-ID <t1E8PJy3MY5vWGDWMcj9ibRfMwKpAhJIj5Iv_6aci7n_xB9LkITYO_vrsZbmBVLjHvUyYBVePx95kOUrAHE9edrufIn8fS8AfT249x95njU=@protonmail.com>
Hi,

I need to implement a way to securely sign a value in a cookie to make sure that it has not been tampered with. I've been playing around with the cryptography library and it does what I need but I'm stuck on secure locations to store the private key and the password required to decrypt it.

Having said that I have experience with GnuPG because I use it for other things and was wondering if that would be a more sensible choice.

I mean it doesn't matter too much if they get exposed as it is only to ensure that cookie data is correct. I'm not using it for secrecy.

So I thought I'd ask here about what the best practice is for generating, storing and encrypting key pairs in Python. I'm using the Flask framework and the MongoDB database.

Simon.

_______________________________________________
Tutor maillist  -  [email protected]
To unsubscribe or change subscription options:
https://mail.python.org/mailman/listinfo/tutor