[haiku-development] BKeyStore usage

  • From: Stephan Aßmus <superstippi@xxxxxx>
  • To: haiku-development@xxxxxxxxxxxxx
  • Date: Thu, 11 Sep 2014 16:34:31 +0200

Hi all,

a development related question for change... :-)

I noticed BKey and BKeyStore are available in the App Kit already. I didn't follow the development of that closely, or at least I don't remember any details.

Can someone outline the general ideas behind this implementation?

My use-case is, I want to store a passphrase for some account securely on disk, and restore it when the user starts the application. My guess is that secure storage of passwords is not possible without the user encrypting the key store with a master passphrase? So each time the user starts the app, he is asked for the master passphrase? I guess in the future, the key store can be encrypted using the user account password, but at the moment, users to not need to log into Haiku. I would like to avoid the user having to enter a password each time the app is started and certain functionality is used.

Or am I wrong about the master passphrase? How can Firefox store my passwords securely? Or maybe it doesn't?

I also looked into src/tests/kits/app, but there seem to be no BKeyStore tests there. I also looked in api.haiku-os.org.

Is there any code available which demonstrates how the API is used?

Thanks & best regards,
-Stephan

Other related posts: