HNGlance

Top Best New Show

Lockbox: secure secrets for your rails model using public key crypto.

http://www.mashd.cc/tag/lockbox

by jamesotron • 17 years ago

2 1 17 years ago

MA

Related Stories

Loading related stories...

Comments

1

sweis• 17 years ago

What padding mode is this using? Looking at the code, I think it's using raw RSA to encrypt the data directly. That may be vulnerable to several attacks.

I may not understand your application correctly, but it's unclear why you're even using public key crypto. It appears that you must type a passphrase to access both a public and private key that live on the same server. Why not just use a symmetric key?

Cautionary advice about rolling your own crypto: http://www.youtube.com/watch?v=ySQl0NhW1J0

Source preview

mashd.cc

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms