How to safely store encryption key in a .NET assembly

Posted by Alex on Stack Overflow See other posts from Stack Overflow or by Alex
Published on 2010-03-27T06:47:08Z Indexed on 2010/03/27 6:53 UTC
Read the original article Hit count: 292

Filed under:

.NET

|

compact-framework

|

key-storage

|

encryption

In order to prevent somebody from grabbing my data easily, I cache data from my service as encrypted files (copy protection, basically). However, in order to do this, I must store the encryption key within the .NET assembly so it is able to encrypt and decrypt these files. Being aware of tools like Red Gate's .NET Reflector which can pull my key right out, I get a feeling that this is not a very safe way of doing it... are there any best practices to doing this?

© Stack Overflow or respective owner

Related posts about .NET

Apt-Get Update: failure to fetch; can't connect to any sources

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I realize there are dozens of "apt-get update: failure to fetch" questions (I read through all I could find), but my present circumstance is unique to 12.04 and it affects all sources; not just launchpad. Additionally, I've tried several different servers in Europe and the U.S. as well as the "main… >>> More
12.04: Apt-Get Update: failure to fetch; can't connect to any sources

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I realize there are dozens of "apt-get update: failure to fetch" questions (I read through all I could find), but my present circumstance is unique to 12.04 and it affects all sources; not just launchpad. Additionally, I've tried several different servers in Europe and the U.S. as well as the "main… >>> More
What's New in ASP.NET 4

as seen on Geeks with Blogs - Search for 'Geeks with Blogs'
The .NET Framework version 4 includes enhancements for ASP.NET 4 in targeted areas. Visual Studio 2010 and Microsoft Visual Web Developer Express also include enhancements and new features for improved Web development. This document provides an overview of many of the new features that are included… >>> More
.NET Reflector 6, .NET Reflector Pro, TestDriven.NET, .NET 4.0 and Mono

as seen on Simple Talk - Search for 'Simple Talk'
By now you may well have noticed that .NET Reflector 6 and .NET Reflector Pro are out in the wild. The official launch happened today, although we actually put the software out last Thursday as part of a phased release plan to ensure that everything went smoothly today which, so far, it seems to have… >>> More
Redmine on Apache2 with Passenger issue

as seen on Server Fault - Search for 'Server Fault'
I installed Redmine and run it in Apache2 with the Passenger module. Apache2 boots, Passenger module gets loaded and the Redmine welcome page is shown, however when trying to login or navigate to other parts of the Redmine site, the browser keeps loading and loading and loading forever, although the… >>> More

Related posts about compact-framework

Getting State of Modifier Keys Compact Framework

as seen on Stack Overflow - Search for 'Stack Overflow'
How can I get the state of a modifier key using VB.NET on the Compact Framework, in this case Windows Mobile 6.1. I want to be able to determine if the following keys are pressed or locked: Shift CTRL ALT and for the Psion Teklogix machines Orange Blue Although I may be able to work this out, if… >>> More
Windows mobile Compact Framework SqlCeConnection

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm hearing that is better to have one connection open upon app start up and closing it when the app shuts down. What kind of issue can occur having multiple connections ? Any articles out there that it is best practices to have one connection? What are your experience with sql ce? >>> More
C#: How to set AsyncWaitHandle in Compact Framework?

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, I'm using a TcpClient in one of my Compact Framework 2.0 applications. I want to receive some information from a TCP server. As the Compact Framework does not support the timeout mechanisms of the "large" framework, I'm trying to implement my own timeout-thing. Basically, I want to do the following: IAsyncResult… >>> More
Has MSDN Dropped Compact Framework already?

as seen on Stack Overflow - Search for 'Stack Overflow'
MSDN Documentation used to indicate if a method was supported on the compact framework. But now I can't find that info anymore. I know that Microsoft has dropped Compact Framework like a hot potato, but I did not know that they had ripped it out of the docs. As examples of what I am talking about… >>> More
Is there compilation symbol to detect compact framework?

as seen on Stack Overflow - Search for 'Stack Overflow'
Is there a compilation symbol to detect if it's running on a compact framework platform >>> More