[Mono-list] where store the key?

Daniel Soto daniel.soto2k at gmail.com
Sat Jan 26 14:32:12 EST 2008


Hi list.

My question is not really related to mono.

I'm writing an application that stores passwords in a mysql database. 
I'm using System.Security.Cryptography namespace, and DES simetric 
algorithm. When i create a new instance of DESCryptoServiceProvider the 
key and IV (initialization vector) are generated randomly. After, i use 
these key and IV to crypt and decrypt passwords in the login screen of 
my application.

Well, this system is safe enough to me, but i have the problem that 
where i can to store these key and IV to future use? I could to write IV 
and key in hard code in my custom class, but this is not elegant. Is a 
good idea to store them in the web.config? If not ¿where can be a good 
and safe place to store it?

Any help will be appreciated.

Best regards.


More information about the Mono-list mailing list