Home/ Questions/Q 8023131
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-04T22:28:52+00:00

I have customer token which i am sending from one webapplication say app1 to

  • 0

I have customer token which i am sending from one webapplication say app1 to another webapplication say app2. I want to encrypt the customer token
at app1 and decrypt it at app2 using key which is shared at both app1 and app2. i am not getting how to start with this? It would be very
helpful if somebody can point me some sample code or some tutotrial using shared key as there are too much encryption/decryption stuff(like symmetric key, public-private key) on net which has really confused me. Another limitation is that i have really short time for this to go in details. Thanks in advance.

EDIT:- I am looking for simple programme something like given at http://sanjaal.com/java/186/java-encryption/tutorial-java-des-encryption-and-decryption/ but using AES? Not able to find this kind of example in AES using shared key?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I would suggest this :

    Have each app of yours assigned a public/private keypair and store the private key securely protected with a password in a secret key. Make sure that this is very secure. Needless to say the public certificate(which contains the public key as well) will be public.
    Each app will have the public key certificates of all the other app. Now when ever an app wants to communicate with other app ;

    First sign(basically encrypting) the token with the sending app’s private key.
    Then encrypt the resulting value with the public key of the app you want to send the data to.

    This way the app that receives this value can be assured that no man in the middle will be able to make out what you have sent and also verify that the token has come from a trusted entity.
    But if you use a shared key(symmetric key), then if the symmetric key is compromised, then all the apps will be compromised.

    • 0