GithubHelp home page GithubHelp logo

jbtule / keyczar-dotnet Goto Github PK

View Code? Open in Web Editor NEW
55.0 55.0 39.0 33.09 MB

Keyczar high level encryption toolkit in C#.

Home Page: https://jay.tuley.name/keyczar-dotnet

License: Apache License 2.0

C# 99.81% Smalltalk 0.19%

keyczar-dotnet's Introduction

Hi there ๐Ÿ‘‹

keyczar-dotnet's People

Contributors

bryanavery avatar jbtule avatar mlh-csis avatar robfe avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar

keyczar-dotnet's Issues

Crash generating a new Crypter when matadata contains password.

Maybe I'm doing something wrong.
If:

  1. KeyczarTool.exe create --location=[path] --purpose=crypt
  2. KeyczarTool.exe create --location=[path] --status=primary
  3. Crypter cyp = new Crypter(path);
    All ok.
    If:
  4. KeyczarTool.exe create --location=[path] --purpose=crypt
  5. KeyczarTool.exe create --location=[path] --status=primary --password
  6. Crypter cyp = new Crypter(path); <--Crash

Should I do something if metadata contains a password for avoiding the crash?
Thanks for your project and Regards,

Insecure storage of private key set

Storing the private key set in the file system is insecure.

Consideration should be given to separate this process into its own library and allow for different storage methods for the key sets to be injected into the library. Such as a Key Vault (HSM), database or other more secure stores.

Keytool.exe password --remove doesn't update meta file

On release: dotnet-0.7.5-beta6

When you use the keytool to add a password, the meta file is updated with "encrypted":true.

When you use the keytool to remove that password, the "encrypted" property is not set back to false. This means that any further operations on the key set cause the following exception:

Unhandled Exception: Keyczar.InvalidKeySetException: Unknown Pbe Cipher
   at Keyczar.Pbe.PbeKeyStore.DecryptKeyData(Func`1 passwordPrompt) in [root]Keyczar\Keyczar\KeySet\Pbe\PbeKeyStore.cs:line 160
   at Keyczar.PbeKeySet.GetKeyData(Int32 version) in [root]Keyczar\Keyczar\KeySet\PbeKeySet.cs:line 70
   at Keyczar.MutableKeySet..ctor(IKeySet keySet) in [root]Keyczar\Keyczar\KeySet\Manage\MutableKeySet.cs:line 68
   at KeyczarTool.Commands.Password.Run(String[] remainingArguments) in [root]Keyczar\KeyczarTool\Commands\Password.cs:line 41
   at ManyConsole.ConsoleCommandDispatcher.DispatchCommand(IEnumerable`1 commands, String[] arguments, TextWriter consoleOut) in c:\src\ManyConsole\ManyConsole\ConsoleCommandDispatcher.cs:line 70
   at KeyczarTool.Program.Main(String[] args) in [root]Keyczar\KeyczarTool\Program.cs:line 4

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.