English 中文(简体)
储存带有必要参数的包装加密钥匙的标准方式是什么?
原标题:What is standard way to store wrapped cryptographic keys with necessary parameters?

Context

I am trying to implement a set to cryptography functionality, compatible between Node.js (as expected server environment) and modern browser. Mostly it works as expected, except RSA-PSS keys import from Node to browser, but this issue is beyond the scope of this question.

Problem

我所期待的是工业标准/光谱,以储存任何种类(测量或私人)的加密钥匙和相关参数。

例如,如果关键加密与从异构体中得出的一个关键参数,那么如何适当储存诸如算法(PFKDF2)等信息,但后来可加以改动),则会变数、盐度或加密参数,例如作为AES-256-GCM的算法,以及第四数据。

I was hoping that webcrypto wrapKey and unwrapKey can give hint on that kind of standard, but all examples at MDN page seems to be assuming that storing this information together with this wrapped key data is beyond scope of what wrapKey and unwrapKey function do.

Looks like I just don t know how to properly to ask this question to web search engine. I expect that there is some industry standard or specification for that, plus I hope to avoid inventing yet another incompatible wheel.

说明: 我研究的是一些双向格式,而不是初等或其它文字表述。

提前感谢!

问题回答

Eventually I researched it further and found that standard way to store the protected keys or "secrets" is DER-encoded data structures according PKCS#8 spec https://datatracker.ietf.org/doc/html/rfc5208 RFC 5208

所有这些,无论是独立的,还是作为诸如





相关问题
selected text in iframe

How to get a selected text inside a iframe. I my page i m having a iframe which is editable true. So how can i get the selected text in that iframe.

How to fire event handlers on the link using javascript

I would like to click a link in my page using javascript. I would like to Fire event handlers on the link without navigating. How can this be done? This has to work both in firefox and Internet ...

How to Add script codes before the </body> tag ASP.NET

Heres the problem, In Masterpage, the google analytics code were pasted before the end of body tag. In ASPX page, I need to generate a script (google addItem tracker) using codebehind ClientScript ...

Clipboard access using Javascript - sans Flash?

Is there a reliable way to access the client machine s clipboard using Javascript? I continue to run into permissions issues when attempting to do this. How does Google Docs do this? Do they use ...

javascript debugging question

I have a large javascript which I didn t write but I need to use it and I m slowely going trough it trying to figure out what does it do and how, I m using alert to print out what it does but now I ...

Parsing date like twitter

I ve made a little forum and I want parse the date on newest posts like twitter, you know "posted 40 minutes ago ","posted 1 hour ago"... What s the best way ? Thanx.

热门标签