3 ms·
This is something I admit I don't quite understand. How are encryption keys stored in a way that makes them significantly less accessible than the database? I'm
by notJim 15y ago
This is something I admit I don't quite understand. How are encryption keys stored in a way that makes them significantly less accessible than the database? I'm interested in the nitty-gritty details of this.
- danielharan 15y agoIt should be possible to have the key only on production machines, which only a subset of devs have access to - and no marketers. (Still shitty, though)
- andymurd 15y agoStore them in a hardware security module (http://en.wikipedia.org/wiki/Hardware_security_module http://en.wikipedia.org/wiki/Hardware_security_module) which never, ever lets them leave. The HSM does the encryption/decryption work for the application.
- yuhong 15y agoYou can't access the source code of an app by just using a SQL injection if the database account is set up correctly.