|
Rank: Advanced Member Groups: Registered
Joined: 12/16/2011(UTC) Posts: 35 Location: Ohio, USA
|
Just thought it'd be nice to have some sort of encrypted data field. Not sure whether this would be better served as a single text/textbox field, or as a data persistence wrapper.
For me, I probably only care about a single field.
Regarding implementation... since the data needs to be decrypted by the system, a key would need to be stored *somewhere*. I'm unsure whether it's available in Mono, but Microsoft's recommendation seems to focus on using DPAPI (data protection API) with a key being stored to the application pool's user account, or the machine account. Given the large variety of implementation options (hosted internally, hosted externally, etc), I've not personally heard of one "best" way. I would also think that salting the hash would be worthwhile (to avoid rainbow tables), perhaps using the UUID.
Thanks, -Scott
|