Collaborate Disseminate
This question is about how to secure API keys. Not sure if this is in the same category as Key management for Cryptography and should follow the same rules. See details below.
We currently have hybrid Mobile Apps. The apps are made using A… Continue reading Securing API keys for accessing Google APIs via Front End (UI)
From the gpg manual:
–refresh-keys
Request updates from a keyserver for keys that already exist on the local keyring.
This is useful for updating a key with the latest signatures, user IDs, etc.
Calling this with no arguments will refres… Continue reading Is `gpg –refresh-keys` secure and where is this documented?
I have a hardware security module connected to a host computer (Windows/Linux). The HSM contains symmetric keys used to encrypt/decrypt data (i.e. files and real-time communications); the keys are stored inside the memory of the HSM and th… Continue reading Authenticate Windows/Linux process against hardware security module
Using a hardware security token as a second factor is generally considered quite a boost in security. But one of the issues I’m having is how to backup the (digital) keys used in the hardware device (especially in cases when just adding mu… Continue reading use custom ‘key’ for hardware security token
Researchers reveal technology called SpiKey that can ‘listen’ to the clicks a key makes in a lock and create a duplicate from the sounds. Continue reading The Sounds a Key Make Can Produce 3D-Printed Replica
I am planning to create an API key using the user’s password as message and a random number assigned to that user in my database as key (or vice-versa). I will then store the hash of that API key in my database.
This will make it possible … Continue reading Is it safe to use HMAC to create an API key?
I have created a GPG key and uploaded it to pgp.mit.edu. Then I accidentally wiped the drive that contained both the key and the revocation certificate. So what to do now?
I found a possible answer here. But how would I do this?
And yes, t… Continue reading Lost GPG private key and revocation certificate
I like to generate a public-private key pair that is seeded from a string. So having the string and the generation algorithm is enough to recreate the keys. I want to do this because I can then combine a password (that I’ll memorize), with… Continue reading What’s a secure way to generate a keypair from a secret password?
I am creating a public API that will require API key authentication. When a user wants to register a new API key, they send a request to one of our endpoints with a list of permissions they want. We generate a unique key (uuid4) and send i… Continue reading Associate API key with user
I tried to use crunch for this case but I just can get numbers like: 000000000000000041242
What I need is a number like: 56248343627437350491
I mean full numbers without thousands of zeros and I just mean thousands of zeros in front of the… Continue reading Generate Random 20 Digit-Integer Key [closed]