Re: secure storage of sensitive data in J2EE

I have a similar question to this sent by Chain.
But, instead of java I m using C. So, which kind of solution do you sugest to
store session keys in a linux enviromnent using C.

regards,
Luciano.

Citando chaim moshe <xor256@hotmail.com>:

> Hello list,
>
> where can I  store sensitive data like encryption keys, passwords, etc. in
> J2EE?
> surely, you can save it in the keystore, but the catch is where do you store
> the keystore password to protect it from external access?
> storing the keystore password in code or in config files is not secured
> enough.
>
>
> In the .NET environment you have DPAPI that was designed exactly for this
> kind of problem, the sensitive data is encrypted at the OS level with the
> user/machine password and is decrypted at runtime.
> What is the solution in the J2EE environment ?
>
> Thanks!
>
> _________________________________________________________________
> Express yourself instantly with MSN Messenger! Download today it's FREE!
> http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/


Luciano R. de Albuquerque
Mestrando - COPPE/Sistemas - UFRJ
Lab. de Redes de Alta Velocidade - RAVEL
http://www.ravel.ufrj.br
http://www.ravel.ufrj.br/~aluciano
http://www.garf.coppe.ufrj.br/

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.