security - How does one search and retrieve encrypted UN/PW sets safely? -
i am, exercise, writing app act password bank. should fit within these parameters: leave no plaintext trace (ie never save un-encrypted user data); securely store full datasets undefined amount of un/pw pairs; 2-factor bonus (dreamy feature).
getting things encrypted easy enough, here's gets sticky: should each account object encrypted , stored in own file or should stored in 1 file ie: (facebook.whatever, google.whatever) or accounts.whatever.
further, , more importantly, how access these encrypted datasets? key should not stored, rather generated password, so... salt password used log app , hash used key/seed prng key? or there better way this?
the problem i'm running this: app should not dump wrongly decrypted data bad password, there must way check password, somehow not decrease security of system.
Comments
Post a Comment