Problem storing a secure key on the filesystem

Question

Hello. I have made a key, and stored this in the file system. But it is not secure.
I have example code of doing this using password with salt and iterations. But the problem is that I get Illegial key size.
Can someone please paste code on how you can do this? I hope you have this code lying around. I would very much appreciate it. Even though it doesnt have password, I just want to know how you can securely store a key.
I know you also can use Cipher.WRAP_MODE, but I don't know which algorithms to use for the cipher. Any help is appreciated.
Shervin Asgari

Answer 1

Yes - but it is still almost trivial for any
competent Java programmer to hack. Even if youcould
hide the password then all a hacker has to do isto
modify the class that reads the file so as towrite
out the decrypted version.so, no solution for the problem of hiding data on the
client's computer?
I'm using a software shipped with a license file. I
have to ask the vendor for a new file when I install
it on a different PC. You mean that I could decrypt
that file and learn how to activate new licenses
simply inspecting the application code?Yes! There seems to be some general opinion that Java is easy to crack and cracking M$ products impossible. All M$ products can be cracked using this approach but since they are not so easy to decompile as Java it is a bit more difficult. There are Java class loaders available that use a dll to hide the Java byte code but once again they just make things a bit more difficult.
What it comes down to is that if your program (whether Java, C, C++ etc) can decrypt data then all the information to decrypt the data must be contained in your program. A code analysis will reveal the encryption method and the parameter values used.