Hi, on a 10 meg text file, I would use the "crypto filesystem" to encrypt it. Then all writes to it will be transparently encrypted and you only need to give the key at boot time or when you need to restart the "crypto filesystem". Basically your text file will get mounted via a loopback device as it's own file system. I guess you could get around the password problem, by having yourself paged when there is a failure, and then ssh in to restart the crypto filesystem. Maybe you could even automate that part of it, and at least keep the password on a separate machine. Otherwise, you best bet is just to obfuscate the passord. Hide it in some binary file, and use some obfuscated way of extracting it, so at least a hacker will have to really work thru a bunch of files to find it. It really isn't too hard to hide something from the casual hacker.
In reply to Re: Cryptography Best Practices
by zentara
in thread Cryptography Best Practices
by jupe
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |