Where to store a cryptographic key

Hello,
I've used DES to chyper configuration files in my application, now I have to store the DES key in a safe place. The only solution i've found is to store if in the class that use that key but it seem an example of "Hard coding", what's the key rest always the same for all the software installation. There isn't a mechanism such a keyring to solve my problem? Do you have any ideas?
Thanks in advantage.

Olek wrote:
Hi,
Why a keystore is no safe place to store the key?
From the API of the BouncyCastleKeystore :
[...]however if you hard drive is in a bad part of town and you absolutely, positively, don't want nobody peeking at your things, this is the one to use, no problem! After all in a Bouncy Castle nothing can touch you[...]
It's just wrong. The only safe place for keys is in an HSM or in an HSM controlled keystore.
So if you store your keys in the store and only get them when needed without storing them in memory over a long time there should be no big security problem?!As a hacker I open up your program and find where you get the key from the keystore. I then add code to write out the key after you extracted it from the keystore. This will work for any language, not just Java, though it is very easy with Java.

Similar Messages

Where to store an API Key - properties or somewhere else.

I'm developing an ADF Faces application with 10.1.3.3 that uses the Google Maps API. This API requires that you obtain an api key - long indecipherable text string from Google that you use from the Javascript routines that call the API. I stored this key in a properties file in the ViewController project, that I bring into the page with the map with <f:loadBundle /> and I reference the api key with appropriate EL to get it from the file.
This works fine, but I have a deployment problem. Google produces API keys that are for a specific website, and don't work from any other site. So I have a different key for my deployed application than on my development workstation where I run the embedded OC4J for testing. Every time I redeploy, the API key from development overwrites the copy on the application server (OAS 10.1.3), and of course, since that is a different website, the Google stuff stops working until I fix the properties file on the application server and restart the application. I made a copy of the correct version of the properties file, so I can do this, but it is a pain.
By the way, because of firewall problems, I redeploy with the Enterprise Manager web console, and an EAR file, not with JDeveloper.
Is there a better way? Is there a better place to store the key so that it doesn't get updated on the application server when I redeploy? Is there a way I can tell JDeveloper or the application server not to overwrite the properties file when I redeploy?

Hello Jflack,
One thing I might suggest you do is to store the value in an application-scoped managed bean property that is initialized from the database. I currently do this for instance-specific (dev/prod/test/etc) values that need to change, such as the URL of a reporting server. In the constructor for this managed bean, I grab an Application Module, find a view object, execute it, and grab the values, stuffing them inside a bean property. You can then refer to the value in the page using an EL expression.
Not sure if this method is possible for you, but it works well for me.
John

Where to store customized modelsupport2 and reportgen*.seq files

We currently put all customized model and front end sequences under c:\Documents and Settings\...\TestStand 4.1\Models etc. We have since customized modelsupport2.* and reportgen*.seq files found in Program Files\NI\TestStand 4.1\Components\Models\TestStandModels. Question is where to store these customized files. There is an assortment of subfolders under Documents and Settings\All Users\Documents\NI\TestStand 4.1.
Solved!
Go to Solution.

What version of Windows do you have?
The file structure in All Users\Documents\NI\TestStand 4.1 should be similar to that in Program Files\NI\TestStand 4.1. Essentially they are equal. The key is TestStand looks in the All Users Directory first. If it doesn't find it there then it goes into the Program Files one. You can verify this by opening your search directories (Configure>>Search Directories). Look for a item in the list called Public components directory. Look at the path for that. The very next entry should be TestStand components directory. Look at the path for that. They both have Subdirs checked. If you were to switch those around (meaning TestStand components directory before Public components directory) then TestStand would grab the default files and not the ones you modified.
So you should put modelsupport2 in Documents and Settings\All Users\Documents\NI\TestStand 4.1\Components\Models\TestStandModels\modelsupport2.*
reportgen*.seq should go in the same folder.
If those folders don't exist then create them. You can probably get away without creating them and just placing it all in the base dir (Documents and Settings\All Users\Documents\NI\TestStand 4.1) but I recommend structuring it the same so you don't get confused and it has the same look and feel.
Hope this helps!
jigg
CTA, CLA
teststandhelp.com
~Will work for kudos and/or BBQ~

I have a file where I store my download music. When I click on "add music" to my ipod my music file opens, but rather than have to drag one song at a time to my ipod, how do I copy the entire file at once to my ipod. - steve

Hi - I have a file where I store my downloaded music. When I plug in my ipod and click on "add music" my file appears. Rather than drag one song at a time, how can I download the entire list at once? - steve

I am not doing it in ITunes, but i did down load the song from ITunes. I loaded the song on to my Nano, but in my menu selections it doesn't show the song or the artist in any search format. However, when i plug in my nano to my PC I see the Nano library on my PC drive listings and that song and artist are there. I can click on the song and it will play in Windows media on my work PC. I did notice that the format for most all the songs in my library on my Nano are MPEG - 4 audio Files.
Thanks for your help, Mel

Where we store in sap r/3

Dear sir we can uploaded old data in sap r/3. by lsmw and bdc. but where we store.
thanks regards
jitendra

Hi,
LSMW - Helps to transfer data from legacy system to SAP either one time or periodically.
Steps -
1. Import data (legacy data in spreadsheet tables and/or sequential files)
2. Convert data (from source format to target format)
3. Import data (into the database of the SAP application)
a. Maintain Structure relations, field mapping and conversion rules.
b. Data from legacy system is read
c. Based on step a, the data gets converted
d. The converted data is imported to R/3 system based onBatch input processing or Direct Input or through IDOC Inbound processing
Regards,
R.Brahmankar

I am getting an error message with my snap scan ix500 that says the Evernote is not installed properly. I have uninstalled/reinstalled evernote but it still doesn't work. Anyone know where evernote stores their files on a Mac/

I am getting an error message with my snap scan ix500 that says the Evernote is not installed properly when I try to transfer it. I have uninstalled/reinstalled evernote and the scan snap softward but it still doesn't work. Anyone know where evernote stores their files on a Mac? Or had this problem.

Are there any dialog boxes popping up behind your Yahoo screen?
I have intermittent problems attaching files in Yahoo mail and this is usually the reason. I'm also using an iMac (10.7.3) and this is likely the problem.
It is generally a Yahoo issue rather than a Mac problem.

Where Can I Buy Replacement Keys For Mid 2012 Macbook Pro Retina?

Hi Recently my macbook pros right arrow key fell of, i didnt hit it or anything it just came of. i placed it back on and a day later it fell off agin, now i have lost that key. Where can i buy replacement keys for my mac?
Product
Mid 2012 Macbook Pro 15 inch Retina Display

Ask your local Apple retailer.
Check iFixit.com.
Try searching Google.

Is there any way to access the thumbails-db, where finder stores its icons that are assigned to files?

Is there any way to access the thumbails-db, where finder stores its icons that are assigned to files?
Thats a SQLite-DB? Is it possible to access and export them? I´d like to use that Db to assign thumbs to files on my NAS.
Thx!

Are the thumbnails & icons stored in the .DS_Store-File?
When visible, how can I access the content stored in that file?

How/Where to store current page details in ADF?

Hi All,
What is the best way to populate the managedBean while loading the page?
In my application, I have an page fragment which display the user details from Webservice DataControl. I drag and drop the webservice data control in to the pageFragment. This fragment has mapped in the taskFlow and the taskFlow as attached in to main JSPX page as a region. I need to store this user information to any place (ManagedBean / or anyother best place to store) which I can use throughout my application, since I dont want to reexecute the webservice each time to get the same user information. Also I want to collect and store this info while I render the main page, not after any user action.
Please advice how & where to store the information in ADF? Can I create an managedBean? If so how to trigger that class method at page load?
Thanks
kln

Hi,
in this case you configure the managed bean to be in session scope. Then, on the first page, you define a phase listener for the after restore phase (its a tag on the f:view element). This phaselistener references the managed bean using EL (important). It can do so using a method expression in JSF. For example, if the managed bean had a method populateUserInfo then yu could reference #{beanname.populateUserInfo} and execute the method expression using Java. In the managed bean, the method would access the binding layer Using the BindingContext class
http://download.oracle.com/docs/cd/E15051_01/apirefs.1111/e10653/oracle/adf/model/BindingContext.html
Call
BindingContext .getCurrent().getCurrentBindingsEntry() to obtain a handle to the active instance of BindingContainer.
BindingContainer bindings = BindingContext .getCurrent().getCurrentBindingsEntry();
Then on the binding container, you invoke the method to query the Web Service for the user info
//before you can call a method on the ADF binding layer, make sure the ADF binding is created for the method
OperationBinding opws = (OperationBinding) bindings.get("name of the method exposed on WS");
//if you need to pass parameters
opws.getParamsMap().put("argument name",value);
opws.execute();
You can use similar code to access the user information from the method iterator in ADF to populate the managed bean fields. You can then access user information from the managed bean through getter and setter methods
Frank
Ps.: I know the description is a bit rough. I'll see if I can come up with a blog sample to a later time
Edited by: Frank Nimphius on Jan 26, 2010 5:43 PM

How do you CHANGE the location (away from Drive C) where Firefox stores temporary files?

I know where Firefox stores temporary files. I want to CHANGE this location away from Drive C to decrease writes to an SSD. Thank you.

Thank you.
This function may be one of the few things that IE does better than Firefox. IE lets you change the temporary file location in Tools - Internet options - Settings. Firefox developers should make this task easier and put the instructions in the Help file where they can be easily found.
Since I use an SSD for Drive C, I have learned that any file(s) that are frequently written to should be moved elsewhere to a conventional HDD.

Where to store DBCP and what to do next?

Dear All,
I would like to use the DBCP(Apache DB pool). I have download (commons-dbcp-1.4-bin.tar.gz) from http://commons.apache.org/dbcp/download_dbcp.cgi. I am using fedora linux and have unzip it too. What should be my next step is where I am stuck because I dont know where to store and how make it applicable for my application? Thank you.

newbie14 wrote:
Dear Masijade,
I dont quite get you. You mean run the command -cp followed by my folder path is it? Then this will be permantently set or I must still go n change somethings inside the .bash profile ? I am not running the java file as project but just as a single java file so any settings for it? Thank you sorry I am very new to all this.Then you should skip DBCP. You should skip JDBC as well. You need to learn the basics of java before you learn JDBC.
And after you learn both of those then you can look at DBCP.

Where to store the servlet class files ?

If, I store the class files for servlets under WEB-INF/classes folder,
          i get file not found exception while using WL 6.1 sp2. But, if i store
          the class file under DefaultWebApp folder, it works fine.
          Any help about where to store the class files for servlets would be
          great help.
          Thanks.
          hiren


Copy Servlet in DefaultWebApp/Web-Inf/classes directory.
          Configure Servlet in web.xml deployment descriptor.
          <servlet>
          <servlet-name></servlet-name>
          <servlet-class></servlet-class>
          </servlet>
          <servlet>
          <servlet-name></servlet-name>
          <servlet-class></servlet-class>
          </servlet>
          <servlet-mapping>
          <servlet-name></servlet-name>
          <url-pattern></url-pattern>
          </servlet-mapping>
          hiren dossani wrote:
          > If, I store the class files for servlets under WEB-INF/classes folder,
          > i get file not found exception while using WL 6.1 sp2. But, if i store
          > the class file under DefaultWebApp folder, it works fine.
          > Any help about where to store the class files for servlets would be
          > great help.
          >
          > Thanks.
          >
          > --
          > hiren

Where to store javabeans

Hi,
I am new to jsp and javabeans. I just want to use a java bean in a JSP file. I don't know where to store my javabean file. Could you please help?

javabeans are Java programs and classes. So, in order for your application to run in a browser, the web server container needs to look for those bean classes. Where to look for ? WEB-INF/classes is place that web server will go and look for and execute those classes. But, I think you can reconfigure your web server directories. There are many web servers out there, and they all have different setups. You need to read your server setup docs.
Philip

Where to store bean program ?

Hi... Am trying to create an Application using JspDynPage Component. am using java bean in this. Can any one tell me where to store this javabean program?

Hi
When you create your Portal component and you select JSP DynPage, 2 steps ahead in the wizard, you get the option: Use a Bean for Information Exchange.
Click generate bean statements and enter the name of your bean and the scope.
P.S. If this answer helped you do consider rewarding points.

Where to store the attachments before sending a mail

can any one help me
when user clicks on attachfiles where to store the attachments before sending an email
thanks in advance

pengyou wrote:
jschell wrote:
pengyou wrote:
However, if I just want store the html file in a file system for quich test purpose, how can I store the url and keep a link to the related file.Instead of storing the content in the database you instead store a file system location (either a path or a file url.)
That file system location is where you store the content.Indeed, the file system location is where I store the content which I crawled from Internet. However, it is not the initial url from which I crawled this content. I would like to store the initial url of this content too. This is still a problem.No it isn't.
You have two pieces of data: Url and content.
If you want to store the content on the file system then your database table would have two columns: url and file_location.
You then do the following
1. Save the content to the file system. Derive a file path from that process.
2. Write a record to the database consisting two data items : url and that file path.

Where to store a cryptographic key

Similar Messages

Maybe you are looking for