SitePoint Sponsor

User Tag List

Results 1 to 3 of 3
  1. #1
    SitePoint Member
    Join Date
    Mar 2011
    Posts
    1
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    Storing Encryption Keys

    Apologies if this type of question has been answered before.

    I am designing a website for which just 100 people will be registering and will only be up for a about 1 month and have been asked to collect sensitive data which requires some extra security (ie identification numbers). Which is the best type of encryption for this, I have thought to use the AES_encrypt function (I'm programming in PHP). The problem that I have is that I don't know how to store the key. I gather that it's not good practice to store this on the same servers where you are hosting the database (I am hosting on a 1and1 package).

    Will a php compiler solve the problem?

    Thanks in advance.

  2. #2
    SitePoint Member
    Join Date
    Feb 2011
    Posts
    3
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    Lightbulb

    You need to store keys on a different machine? Try to send each key with e-mail to some "backup" address, or simply use free ftp

  3. #3
    . shoooo... silver trophy logic_earth's Avatar
    Join Date
    Oct 2005
    Location
    CA
    Posts
    9,013
    Mentioned
    8 Post(s)
    Tagged
    0 Thread(s)
    Quote Originally Posted by kajfat View Post
    You need to store keys on a different machine? Try to send each key with e-mail to some "backup" address, or simply use free ftp
    No and no. Never use Email or use FTP for anything sensitive or to be secured. That is a death wish.
    Logic without the fatal effects.
    All code snippets are licensed under WTFPL.



Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •