CODEWITHSUNDEEP
securityamazon-web-servicesencryptioncryptography
Karthick Selvaraj
Karthick Selvaraj

Reputation: 2505

How to store my encryption key in secure way while doing client side encryption in mobile app?

I want to do client side encryption in mobile app and the encrypted data will be saved in server. The data should be decrypt when user logged in another device also. Is there any other way to store the "key" securely, which is used for encrypt and decrypt my data other than my server?  Usually we store encryption "key" in server, but i need more secure place than my server?

Can we use solutions like AWS KMS for this?

Upvotes: 1

Views: 385

Answers (1)

Mark
Mark

Reputation: 103

You could just never store the (presumably symmetric) key on the device, but instead deterministically regenerate the key each session using a Password-Based Key Derivation Function

Upvotes: 1

Related Questions