4 ms·
Key management is a very real issue in cryptographic systems. Arguably, convenient key management improves security. Simplistic interpretations are the bane o
by omginternets 10y ago
Key management is a very real issue in cryptographic systems. Arguably, convenient key management improves security.
Simplistic interpretations are the bane of security engineering, especially where human factors are involved.
- rietta 10y agoIndeed. I'm about to have a form of that conversation with a client today. Just encrypting columns in your database is of some value, but having the symmetric key in an environment variable (a common practice) is not going to prevent a breach when the data and the key are compromised at the same time.