隐藏密钥的最佳位置？
我正在寻求有关在何处存储加密密钥和其他敏感应用程序数据的建议。 U 盘上的证书真的是正确的方法吗？您可以采取什么措施来保证您的密钥安全？
I am looking for advice on where to store encryption keys and other sensitive application data. Is a certificate on a USB stick really the way to go here? What can you do to keep your secret keys safe?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
将它们保存在智能卡上，或者使用当今出售的许多机器中存在的可信平台模块（TPM）。
Keep them on a smart card, or use the Trusted Platform Module (TPM) that is present in many machines sold these days.
keystore （请参阅：getKey ()) 通常是保存秘密的地方，例如私钥。为了访问此密钥，请存储密码。它们是使用对称密码创建的。
A keystore (see: getKey()) is often a place where a secret, like a privet key is kept. In order to access this key store a password. These are created using a symmetric cipher.
如果它是一个秘密，并且您必须将其存储在某个地方，那么在某些时候它就不能真正被视为秘密了，因为以某种方式，某人将能够找到它，等等。安全性总是最好考虑以下情况：根据具体情况，一种解决方案可接受的方案不适用于另一种解决方案，因此不存在任何“适合所有人”的答案。但是，在可能的情况下（或始终）确保您使用经过尝试和测试的方法，而不是使用自己的方法。希望这确实有帮助，但这是一个广泛开放的问题。
If it's a secret and you have to store it somewhere, then at some point it can't really be considered a secret anymore because one way or another somebody will be able to find it, etc. Security is always best considered on a case by case basis, what is acceptable for one solution is not for another and therefore there is not any "fits all" answer. However, where possible (or always) make sure you use a tried and tested method rather than roling your own. Hopefully that does help, but is such a wide open question.