Re: [aerogear-dev] Question around encryption for iOS push certificate passphrase

Hello Bruno, On Wed, Feb 5, 2014 at 5:05 PM, Bruno Oliveira <bruno(a)abstractj.org&gt; wrote: OK, not storing the 'private key', but instead I am only storing the IV, salt and ciphertext, right ? The following code is basically the (relevant) code behind the web-form when someone creates the logical construct of an iOS variant: https://github.com/matzew/psswd-salting/blob/master/src/test/java/net/wes... In real I get all the information for the variant (e.g. its name, its description, its certificate file and the passphrase for the certificate), but the above has been limited to the passphrase, as everything else is not so important here :-) So after that I have basically the following pieces in the database: * IV * salt * ciphertex instead of the plaintext passphrase for the iOS certs. But, now, somewhere later in in the program, I need to do the decryption to get the actual passphrase for the stored Apple-certificate. However, I don't see how to create the CryptoBox here, as I should not stash the private/secret key, nor do I have access to the previous CryptoBox object https://github.com/matzew/psswd-salting/blob/master/src/test/java/net/wes... Looks like I am missing something here -Matthias -- Matthias Wessendorf blog: http://matthiaswessendorf.wordpress.com/ sessions: http://www.slideshare.net/mwessendorf twitter: http://twitter.com/mwessendorf