Welcome!

Welcome to the official BlackBerry Support Community Forums.

This is your resource to discuss support topics with your peers, and learn from each other.

inside custom component

Web and WebWorks Development

Reply
Developer
Posts: 817
Registered: ‎11-19-2009
My Device: Z10, Q10, 9900, 9790, PlayBook,

How do we access the OS's key store/chain to store and retrieve passwords?

[ Edited ]

I'm looking for a secure way to store credentials, but there doesn't seem to be any.

It seems Cascades doesn't support QtKeyChain and Webworks has no API to access a keychain either.

Native devs have at least access to the encryption API, so that's better than nothing, but we don't.

 

Is there an official solution coming our way?

 

 

--
Olivier - interfaSys ltd
Developing for BlackBerry 10 devices using the Sencha Touch framework.
Developer
Posts: 817
Registered: ‎11-19-2009
My Device: Z10, Q10, 9900, 9790, PlayBook,

Re: How do we access the OS's key store/chain to store and retrieve passwords?

No official statement???

In quite a few of the WebWorks samples requiring API keys, there is a paragraph about security and a recommendation:

"One way to securely pass your API Keys to your application is to host them on a server, then use SSL and do a POST to obtain your keys"

I fail to see how this protects the API keys since anybody reading the Javascript Source will also get the full URL and will be able to retrieve the data.

 

Will BB10 ever have a keystore which will only be accessible by apps and thus protect an app's keys or do we have to rely on security through obscurity (weak) or run every request through a server (costly)?

 

--
Olivier - interfaSys ltd
Developing for BlackBerry 10 devices using the Sencha Touch framework.
Developer
Posts: 817
Registered: ‎11-19-2009
My Device: Z10, Q10, 9900, 9790, PlayBook,

Re: How do we access the OS's key store/chain to store and retrieve passwords?

Interesting knowledgebase article about how to use the Security Builder Crypto-C APIs in Cascades.

http://supportforums.blackberry.com/t5/Native-Development/BlackBerry-10-Using-one-way-encryption-for...

 

Could we have the same for Webworks, please?

It would be a start.

--
Olivier - interfaSys ltd
Developing for BlackBerry 10 devices using the Sencha Touch framework.