security - How does one search and retrieve encrypted UN/PW sets safely? -


i am, exercise, writing app act password bank. should fit within these parameters: leave no plaintext trace (ie never save un-encrypted user data); securely store full datasets undefined amount of un/pw pairs; 2-factor bonus (dreamy feature).

getting things encrypted easy enough, here's gets sticky: should each account object encrypted , stored in own file or should stored in 1 file ie: (facebook.whatever, google.whatever) or accounts.whatever.

further, , more importantly, how access these encrypted datasets? key should not stored, rather generated password, so... salt password used log app , hash used key/seed prng key? or there better way this?

the problem i'm running this: app should not dump wrongly decrypted data bad password, there must way check password, somehow not decrease security of system.


Comments

Popular posts from this blog

c# - Binding a comma separated list to a List<int> in asp.net web api -

how to prompt save As Box in Excel Interlop c# MVC 4 -

xslt 1.0 - How to access or retrieve mets content of an item from another item? -