[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ms-cryptoapi
Subject:    Re: How to protect private keys?
From:       "Jerry H. Prado" <jerryprado () WA ! NET>
Date:       1997-11-24 15:56:07
[Download RAW message or body]


Although I am convinced that hardware must be incorporated to truly protects
keys, I have a problem with having to install card-readers in the PCs. The
Crestech device plugs into an available port and secures any PC. It just
seems more practical.

Jerry Prado
Prado Engineering


-----Original Message-----
From: Alan Braggins <armb@NCIPHER.COM>
To: CryptoAPI@LISTSERV.MSN.COM <CryptoAPI@LISTSERV.MSN.COM>
Date: Monday, November 24, 1997 4:53 AM
Subject: Re: How to protect private keys?


>> >So my question is simple. How can I stop private keys being read in the
>> >way described above? Secondly even if I can make a CryptoAPI call to
>> >protect keys, how could the average user do the same with MSIE?
>>
>> Datakey will shortly be shipping a our CSP which generates and stores
keys
>> and certificates on our SignaSURE smart card.  The smart card's OS has
>> features that prevent private keys from being exported under any
>> circumstances.
>
>nCipher's accelerators (http://www.ncipher.com/) can also use
>Datakey memory keys or smart cards to secure keys. When our
>CSP interface will be shipping depends on signing and export
>issues.
>
>More generally, for example using the default provider, you
>could export your keys under a session key derived from a pass
>phrase, and delete them (and the session key) from the key
>container. Any application wanting to import them would then
>have to ask for the pass phrase to derive it again.
>
>--
>Alan Braggins  mailto:armb@ncipher.com  http://www.ncipher.com/
>nCipher Corporation Ltd.  +44 1223 723600  Fax: +44 1223 723601
>
>----------------------------------------------------------------
>Users Guide http://www.microsoft.com/sitebuilder/resource/mailfaq.asp
>contains important info including how to unsubscribe.  Save time, search
>the archives at http://microsoft.ease.lsoft.com/archives/index.html

----------------------------------------------------------------
Users Guide http://www.microsoft.com/sitebuilder/resource/mailfaq.asp
contains important info including how to unsubscribe.  Save time, search
the archives at http://microsoft.ease.lsoft.com/archives/index.html

[prev in list] [next in list] [prev in thread] [next in thread]