compact framework - Can another application access a private key stored in a key container using RSACryptoServiceProvider? -
i using rsacryptoserviceprovider
generate public/private key pair , using cspparameters
object store in key container.
my problem after store private key in key container, can application access key container , retrieve private key generated?
if yes, security of key compromised isn't it?
how avoid this? should encrypt generated private key symmetric encryption algorithm?
without using hardware security module, protection set cspparameters.flags field:
cspparameters.flags = cspproviderflags.usenonexportablekey | cspproviderflags.useuserprotectedkey;
the first flag prevents software "honestly" exporting private key. second requires user interaction gui perform private key operations.
Comments
Post a Comment