You may not be authorized to see this content. Please contact Data Access Europe for more information.

Cancel Data Access Europe

You are not authorized to see this content.

Cancel Data Access Europe

Security the Basics

Introduction (1m 12s)

Install the workspace (2m 38s)

Data Protection (2m 49s)

Restrict database access to your applications (8m 44s)

Data in transit https Web (13m 15s)

SQL injection (3m 59s)

DataFlex Security Library overview (6m 46s)

Generic hashes (5m 55s)

Keyed hashes (5m 48s)

Data at rest (2m 52s)

Encryption Symmetric key encryption seclib (9m 11s)

Encryption Authenticated Encryption (seclib) (5m 37s)

Encryption Key Storage (1m 15s)

Access Control (2m 54s)

Authentication Overview (2m 32s)

Authentication Passcode Storage (7m 10s)

Authentication Passcode Storage (Web App) (5m 09s)

Key Derivation (6m 02s)

Authentication Stronger Passcodes (2m 54s)

Authentication 2FA (Web, seclib) (12m 03s)

Authentication Loose ends (2m 07s)

Next lesson:

Access Control

Cancel

Security the Basics

Lesson 12: Encryption – Key Storage

Where is the encryption key stored?

There are several options for storing encryption keys, but many are not very good options. For example, storing keys in the database along with encrypted data is insecure because if the data is stolen the keys are stolen as well. Two other options are to hard code them in programs or store them in a separate file on the file system.