Best way to store encryption keys in .NET C#

by

If you want to protect your data from other users. Take a look at the ProtectedData class.

(Disclaimer: Protecting your data to create a copy protection scheme is not covered in this answer).

This classes uses the DPAPI from Windows, to encrypt and decrypt data on user or machine level.

Using ProtectedData/DPAPI frees you from handling keys and securing the data yourself. And you can choose to protect the data for the current user. The data can be read from different computers, by the same domain users.

If you want create your own key. You can create a key per user/machine, and store this key in the registry. Because the registry can be secured, only the current user can read the key back. I know the registry has bad karma, but is actually very good at storing data like this.

PS: Do not put the IV in your code. Create a new IV every time, and put it in front of the data.

More Related Contents:

  1. How to convert SecureString to System.String?
  2. Encrypt and decrypt a string in C#? [closed]
  3. Why is JsonRequestBehavior needed?
  4. Requested registry access is not allowed
  5. C# version of OpenSSL EVP_BytesToKey method?
  6. MD5 hash with salt for keeping password in DB in C#
  7. In .NET/C# test if process has administrative privileges
  8. Storing credit card details
  9. Does using parameterized SqlCommand make my program immune to SQL injection?
  10. Encrypting credentials in a WPF application
  11. OpenSSL encryption using .NET classes
  12. Encrypting/Decrypting large files (.NET)
  13. Why does a bad password cause “Padding is invalid and cannot be removed”?
  14. Password encryption/decryption code in .NET
  15. Programmatically encrypting a config-file in .NET
  16. “Padding is invalid and cannot be removed” using AesManaged
  17. Problem Updating to .Net 6 – Encrypting String
  18. Encrypting Web.Config
  19. CryptographicException “Key not valid for use in specified state.” while trying to export RSAParameters of a X509 private key
  20. Encrypt SQLite database in C#
  21. Encryption compatible between Android and C#
  22. AES encryption on large files
  23. Shredding files in .NET
  24. Best way to restrict access by IP address?
  25. Why .NET String is immutable? [duplicate]
  26. What is the purpose of the “Prefer 32-bit” setting in Visual Studio and how does it actually work?
  27. WebBrowser.DrawToBitmap() or other methods?
  28. Set focus on textbox in WPF
  29. What is the worst gotcha in C# or .NET? [closed]
  30. When is ReaderWriterLockSlim better than a simple lock?

Leave a Comment