Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
secure storage of sensitive data in J2EE
From: chaim moshe (xor256hotmail.com)
Date: Tue Jan 25 2005 - 03:18:15 CST
where can I store sensitive data like encryption keys, passwords, etc. in
surely, you can save it in the keystore, but the catch is where do you store
the keystore password to protect it from external access?
storing the keystore password in code or in config files is not secured
In the .NET environment you have DPAPI that was designed exactly for this
kind of problem, the sensitive data is encrypted at the OS level with the
user/machine password and is decrypted at runtime.
What is the solution in the J2EE environment ?
Express yourself instantly with MSN Messenger! Download today it's FREE!