security - How does one search and retrieve encrypted UN/PW sets safely? -


i am, exercise, writing app act password bank. should fit within these parameters: leave no plaintext trace (ie never save un-encrypted user data); securely store full datasets undefined amount of un/pw pairs; 2-factor bonus (dreamy feature).

getting things encrypted easy enough, here's gets sticky: should each account object encrypted , stored in own file or should stored in 1 file ie: (facebook.whatever, google.whatever) or accounts.whatever.

further, , more importantly, how access these encrypted datasets? key should not stored, rather generated password, so... salt password used log app , hash used key/seed prng key? or there better way this?

the problem i'm running this: app should not dump wrongly decrypted data bad password, there must way check password, somehow not decrease security of system.


Comments

Popular posts from this blog

c# - Binding a comma separated list to a List<int> in asp.net web api -

Delphi 7 and decode UTF-8 base64 -

html - Is there any way to exclude a single element from the style? (Bootstrap) -