compact framework - Can another application access a private key stored in a key container using RSACryptoServiceProvider? -


i using rsacryptoserviceprovider generate public/private key pair , using cspparameters object store in key container.

my problem after store private key in key container, can application access key container , retrieve private key generated?

if yes, security of key compromised isn't it?

how avoid this? should encrypt generated private key symmetric encryption algorithm?

without using hardware security module, protection set cspparameters.flags field:

cspparameters.flags = cspproviderflags.usenonexportablekey |  cspproviderflags.useuserprotectedkey; 

the first flag prevents software "honestly" exporting private key. second requires user interaction gui perform private key operations.


Comments

Popular posts from this blog

c++ - How do I get a multi line tooltip in MFC -

asp.net - In javascript how to find the height and width -

c# - DataTable to EnumerableRowCollection -