RE: Protecting private keys

From: lelteto (lelteto_at_discussions.microsoft.com)
Date: 06/09/05 

Date: Thu, 9 Jun 2005 10:28:11 -0700

If you are storing the private key in a secure hardware than you can store it
as it is (ie. inject the value). However, if your hw needs to be FIPS-140
compliant than you cannot inject the key unencrypted: you would need to wrap
it (with another key).

Laszlo Elteto
SafeNet, Inc.

"natush" wrote:

> I’m writing a CSP and I have a question regarding the protection of the
> private key.
> I read on the MSDN that after the generation of the private key I should
> call CryptProtectData.
> Is a CSP obligated to protect the private key this way? Since I need a
> higher protection level - I want to protect the keys using a special hardware
> mechanism. Is it legitimate?
>

Relevant Pages

  • Re: Protecting private keys
    ... one last piece of information - the key you wrap this other key with, ... > If you are storing the private key in a secure hardware than you can store ... > as it is (ie. inject the value). ... >> Is a CSP obligated to protect the private key this way? ...
    (microsoft.public.platformsdk.security)
  • Re: Private key access security
    ... It encrypts ... it is a client certificate for client application to ... >> I have no idea how secure private key can be in Windows XP. ... >> somehow encrypted to protect access from other login accounts? ...
    (microsoft.public.dotnet.security)
  • Re: Private key access security
    ... It encrypts ... it is a client certificate for client application to ... >> I have no idea how secure private key can be in Windows XP. ... >> somehow encrypted to protect access from other login accounts? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS Private Keys
    ... password is important to ensure that EFS ... > the private keys are protected however the key to the private key is the ... > stronger encryption available for EFSfiles permanently if you don't. ... >> Is there some super-secret OS key that is used to protect all private ...
    (microsoft.public.win2000.security)
  • Re: Private key access security
    ... It encrypts ... it is a client certificate for client application to ... >> I have no idea how secure private key can be in Windows XP. ... >> somehow encrypted to protect access from other login accounts? ...
    (microsoft.public.security)