[Esapi-user] store encyrptor.masterkey encrypted

Yi Li yi.li26 at gmail.com
Fri Jan 29 13:48:14 EST 2010


greetings, all:
    will appreciate if anyone could provide insight here.
    I would like to store the master encryption key (encryptor.masterkey)
with some sort of protection, instead of keeping it clear text in the
properities file even though i can place access control via the file system.
   i am thinking to either store the encryption key either in a database or
in a flat file but encrypted (where to store the master's master key become
another problem to solve).
   will appreciate if anyone could point me to an implementation that will
support this or point me the way to write my own implementation to implement
this.
  thanks in advance.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/esapi-user/attachments/20100129/eadb4967/attachment.html 


More information about the Esapi-user mailing list