Questions tagged [key-management]

77 questions
4
votes
1 answer

pricing encrypting RDS with KMS

i want to encrypt my RDS instance from Amazon Web Service but i dont know the explanation of the pricing. It says that each API request of AWS Key Management Service costs $0.03 per 10,000 requests. Every query means an API request or every…
mgg
  • 151
  • 1
  • 6
4
votes
0 answers

Using keytool to list secret key

I used keytool to generate the secret key: keytool -genseckey -alias mykey -keyalg AES -keysize 256 -storetype jceks -keystore mykeystore Then, the following command will list information about mykeystore: keytool -list -keystore mykeystore…
klichen
  • 49
  • 1
  • 2
4
votes
1 answer

How to encrypt client-side with AWS KMS using the C# SDK

Is there already a C# library for encrypting and decrypting data using Amazon's Key Management Service (KMS) but without sending your sensitive data to Amazon (i.e. using "envelope encryption" as described in their developer guide)? Something that…
KingPong
  • 1,331
  • 1
  • 14
  • 21
4
votes
2 answers

How do I separate an encryption key into parts?

I have a 128 bit encryption key that I would like to break up into three parts that when XOR'ed together reproduce the key. How do I do this?
crawfish
  • 733
  • 4
  • 9
  • 14
4
votes
2 answers

Developing a web application that automatically rotates encryption keys used to encrypt data stored in a database

Assuming I have a ASP.NET MVC 3 application that runs in a web farm where each web server belongs to a workgroup (as appose to a domain with shared accounts). The web farm is also auto scalable, meaning that the number of instances are dependent on…
bloudraak
  • 5,512
  • 5
  • 33
  • 49
4
votes
1 answer

Encrypt Patient Data

I am going to use AES_ENCRYPT() and AES_DECRYPT to store patient data in an EMR System, and I was wondering how to store the key. I need to be able to allow authorized users access to that key in order to decrypt and read the data that is stored in…
user658096
3
votes
0 answers

How to make PKCS12 (PKCS#12) contain more than one private key in .p12 container?

I used Openssl to create a PKCS12 .p12 container storing a private key, server certificate and a CACertificate (Self signed) and I was able to export/parse the same successfully. But I want to know how I can add more than one Private key to the…
Arun kumar R
  • 135
  • 7
3
votes
1 answer

How are KMIP and PKCS#11 related?

I understand that PKCS#11 is std that defines cryptoki API and KMIP is a protocol that defines message format, but how they are connected or are they even interconnected? How they both hold their individual significance in cryptography?
TheBeginner
  • 343
  • 1
  • 21
3
votes
2 answers

Best practices for key/certificate management

I'm deploying hundreds/thousands of small servers that communicate with my hosted mothership via HTTPS and ssh. What are the best practices for managing SSL client certs (for https) and ssh keys, when either might need to be revoked? I'm thinking…
Bill Gribble
  • 1,677
  • 11
  • 14
3
votes
3 answers

Encryption Key Management Software and Transparent Data Encryption MySQL

For PCI compliance, is there any recommended Encryption Key Management Software? Open source preferable, but commercial is ok too. Is there a tool or software that provides both?
Prabhu R
  • 12,624
  • 19
  • 75
  • 107
3
votes
1 answer

How to store the AES Rijndael generated Key to the database?

When creating the instance, the KEY and IV are generated for me. RijndaelManaged myRijndael = new RijndaelManaged(); How can I store the Key in my database or web.config file? And in what format? Because I will have to load the key when trying to…
Blankman
2
votes
1 answer

Diffie Helman Key exchange with four parties

I'm trying to modify an example Deffie Helman key exchange between three parties. Here is the Code. // Alice uses Carol's public key Key ac = aliceKeyAgree.doPhase(carolKpair.getPublic(), false); // Bob uses Alice's public key …
Chulbuli
  • 23
  • 6
2
votes
1 answer

Unattended/automated Linux device key management (certs for accessing update servers)

I am currently working on a customized media center/box product for my employer. It's basically a Raspberry Pi 3b+ running Raspian, configured to auto-update periodically via apt. The device accesses binaries for proprietary applications via a…
Untha
  • 21
  • 3
2
votes
1 answer

Microsoft.AspNetCore.DataProtection.KeyManagement.KeyRingProvider[48] An error occurred while reading the key ring

This issue only comes when i deploy the ASP .NET Core 2.1 Web App on shared hosting. I am using Azure Key vault with PersistKeysToFileSystem. Web App is working good on my development machine and on Azure App with and without Azure Key Vault using…
2
votes
1 answer

Generating a unique encryption key or salt per app installation

I'm working on the topic on how to securely store sensitive data on an Android device. Of course there's no 100% secure method, I'd like to get as secure as possible. I've read through the official recommendations. Just as an example, I have an app…