You don’t need a key pair, so I can’t see any good reason to use the KeyStore. If Apple graciously requires the passphrase in plain text we need to do something about it. PBKDF2 is not only a function to store passwords, but is also possible to generate secret keys. So into your scenarios the solution is:         Pbkdf2 pbkdf2 = AeroGearCrypto.pbkdf2();         byte[] salt = new Random().randomBytes();         int iterations = 100000;         SecretKey secretKey = pbkdf2.generateSecretKey(PASSWORD, salt, iterations);         CryptoBox cryptoBox = new CryptoBox(secretKey.getEncoded());         String passphrase = "My bonnie lies over the ocean";         byte[] ciphertext = cryptoBox.encrypt(CRYPTOBOX_IV, passphrase, RAW); Salt, IV and the number of iterations must be stored in some place, or you can just stick with the default number of iterations. But you still need to store salt and IV. -- abstractj On February 5, 2014 at 9:20:37 AM, Matthias Wessendorf (matzew(a)apache.org) wrote:

You shouldn’t store your private key, please make use of the suggested code and let me know. -- abstractj On February 5, 2014 at 2:00:45 PM, Matthias Wessendorf (matzew(a)apache.org) wrote:

On Wed, Feb 5, 2014 at 2:49 PM, Matthias Wessendorf <matzew(a)apache.org&gt;wrote: Right. In this case you don't need store Private Key *NEVER* store password/passphrase If you have Salt and password you can create a PrivateKey "on the fly" Pbkdf2 pbkdf2 = AeroGearCrypto.pbkdf2(); byte[] rawPassword = pbkdf2.encrypt(passphrase, salt); PrivateKey privateKey = new PrivateKey(rawPassword); And for create CriptoBox you only need a PrivateKey CryptoBox cryptoBox = new CryptoBox(privateKey); Now you a able to decrypt using stored IV :) byte[] decryptedData = cryptoBox.decrypt(IV, data); That was exactly what we did in Ecrypted Store https://github.com/danielpassos/aerogear-android/blob/master/src/org/jbos... -Matthias

You need tho reconstruct that key again with the pieces from your database, so your code would look like: @Test     public void testPasswordValidationWithRandomSaltProvided() throws Exception {         Pbkdf2 pbkdf2 = AeroGearCrypto.pbkdf2();         byte[] salt = new Random().randomBytes();         byte[] IV = new Random().randomBytes();         int iterations = 100000;         //Encrypt step         SecretKey secretKey = pbkdf2.generateSecretKey(PASSWORD, salt, iterations);         CryptoBox box1 = new CryptoBox(secretKey.getEncoded());         String passphrase = "My bonnie lies over the ocean";         byte[] ciphertext = box1.encrypt(IV, passphrase.getBytes());         //Decrypt step         SecretKey recoveredKey = pbkdf2.generateSecretKey(PASSWORD, salt, iterations);         CryptoBox box2 = new CryptoBox(recoveredKey.getEncoded());         byte[] plaintext = box2.decrypt(IV, ciphertext);         System.out.println(RAW.encode(plaintext));     } -- abstractj On February 5, 2014 at 3:59:06 PM, Matthias Wessendorf (matzew(a)apache.org) wrote:

There is no magic, the password must exist in some place. If not possible require the password, is possible to follow the same approach provided for password reset functionality. If you want to stick to the KeyStore, you still need to provide the password in some place, but that’s more suitable when you have a key exchange or something like this. So if you patiently read my the code proposed, you will realize that is possible to achieve it via property file, database or whatever: @Test     public void testPasswordValidationWithRandomSaltProvided() throws Exception {         Pbkdf2 pbkdf2 = AeroGearCrypto.pbkdf2();         byte[] salt = new Random().randomBytes();         byte[] IV = new Random().randomBytes();         int iterations = 100000; read.secretFile(“secret.properties”); String PASSWORD = read.load(“password_to_my_superpassphrase”);         //Encrypt step         SecretKey secretKey = pbkdf2.generateSecretKey(PASSWORD, salt, iterations);         CryptoBox box1 = new CryptoBox(secretKey.getEncoded());         String passphrase = "My bonnie lies over the ocean";         byte[] ciphertext = box1.encrypt(IV, passphrase.getBytes());         //Decrypt step         SecretKey recoveredKey = pbkdf2.generateSecretKey(PASSWORD, salt, iterations); } If it’s not clear, let me know where should I introduce this functionality rather than a pet project and I can do that. -- abstractj On February 5, 2014 at 4:47:04 PM, Matthias Wessendorf (matzew(a)apache.org) wrote:

On February 5, 2014 at 5:47:24 PM, Matthias Wessendorf (matzew(a)apache.org) wrote: You’ve probably misunderstood what I said, but that would be silly and impractical, I didn’t say that, right? If you don’t want to require an input every time, make use of SINGLE key to encrypt the passphrases that’s what was suggested. That’s what I’ve already mentioned, the password MUST be provided. And there are a gazillion of solutions to the same problem outside there. Why? I don’t bother whoever will solve this ticket. If you want to jump in, feel free to reassign to you, if don’t I can look at this on the next week.

On Wed, Feb 05, 2014 at 09:06:04PM +0100, Matthias Wessendorf wrote: Well, there's no free lunch, you've got to store this somewhere - or shoot for oauth dance between apps + HSMs + loads of money -- qmx