[Mono-list] where store the key?
    Daniel Soto 
    daniel.soto2k at gmail.com
       
    Sat Jan 26 14:32:12 EST 2008
    
    
  
Hi list.
My question is not really related to mono.
I'm writing an application that stores passwords in a mysql database. 
I'm using System.Security.Cryptography namespace, and DES simetric 
algorithm. When i create a new instance of DESCryptoServiceProvider the 
key and IV (initialization vector) are generated randomly. After, i use 
these key and IV to crypt and decrypt passwords in the login screen of 
my application.
Well, this system is safe enough to me, but i have the problem that 
where i can to store these key and IV to future use? I could to write IV 
and key in hard code in my custom class, but this is not elegant. Is a 
good idea to store them in the web.config? If not ¿where can be a good 
and safe place to store it?
Any help will be appreciated.
Best regards.
    
    
More information about the Mono-list
mailing list