在本地存储断开连接模式的加密密钥
我需要在本地存储加密密钥，以便允许用户在断开连接模式下使用我的 CouchApp。我将发送的数据非常敏感，需要依法加密。但是，我们希望在断开连接的情况下提供对数据的完全访问。目前我们有一个密码密钥生成器，但这需要用户每次想要查看记录时输入密码。此外，这似乎并不安全，因为经验丰富/高级的用户可能会访问加密密钥，然后访问本地数据库。我基本上想知道是否有人有断开连接的安全模型的经验，或者您是否可以提供有关如何在保持安全性的同时允许访问的任何指示。
I need to store an encryption key locally in order to allow a user to use my CouchApp in a disconnected mode. The data that I will be sending is very sensitive and requires encryption by law. However, we would like to offer full access to data when running disconnected. Currently we have a password key generator, but this would require the user to enter their password every time they want to view a record. Also this doesn't seem to be secure as an experienced/advanced user could potentially access the encryption key, and then the Local Database. I'm basically wondering if anybody has experience with the disconnected security model, or if you can offer any pointers on how to allow access while maintaining security.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
如果您的客户端直接连接到数据库，那么所有用户都可以访问整个数据集。显然你信任你的用户......一切。此功能打破了最常见的数据保护模型。攻击者不需要 sql 注入或不安全的直接对象引用，他可以获取任何他想要的东西，因为你给了他一切。
我不明白密码学如何解决你的问题。它看起来就像教科书违反 CWE-602。
If your client is connecting directly to the database then all users have access to the entire data set. Apparently you trust your users... with everything. This feature right here breaks the most common data protection models. An attacker doesn't need sql injection or insecure direct object reference, he can just grab whatever he because you are giving him everything.
I don't see how cryptography solves your problems. It looks like a textbook CWE-602 violation.