security - Securing p12 file -


how can securely store p12 file? per knowledge in p12 file certs encrypted rc 40 bits , keys encrypted des3 brute force technique can reveal password of certs , same can used keys , makes p12 file bit insecure. want p12 file securely stored in file system. can encrypt file , store it.if yes, file still usable.

pkcs#12 definition not define algorithms legal use. pkcs#12 structure of container certificates , private keys. container can encrypted , signed. see more here: https://tools.ietf.org/html/rfc7292

theoretically encryption brute forced. question cost , effort successfully. picking trusted algorithms (see list of nist approved algorithms example) can sleep night rather knowing private key inside of encrypted pkcs#12 container remain safe against brute force.

if pkcs#12 file uses 3des encryption still considered safe. see more here: https://security.stackexchange.com/questions/146710/is-the-3des-algorithm-secure

but if want restrict access pkcs#12 file , private key inside of it, cheap option restricting permissions of file in file system. means user running process have access file. more pricier options use hardware tokens , hsms. vendors safenet , thales example , can use through crypto engines , interfaces such pkcs#11. pkcs#12 file protected passphrase, recommended if can tolerate human interactions. in server environments or other use cases human interaction not possible, passphrase protected pkcs#12 may tricky since need find way protect passphrase itself.


Comments

Popular posts from this blog

node.js - Node js - Trying to send POST request, but it is not loading javascript content -

javascript - Replicate keyboard event with html button -

javascript - Web audio api 5.1 surround example not working in firefox -