On 30 Dec 2009, at 17:59, Mr. Gecko wrote:

> This is basically for Parental Controls, I know I could ask for a password at 
> first, but then any kid could grab a copy and set their own password. What 
> I'm doing is I'm asking for them to authenticate with Mac OS X, and then once 
> they are authenticated, I'm allowing them to set settings that are encrypted 
> with a key in AES.

Perhaps a better way would be to ask for a password once the user is 
authenticated, and then generate an AES key using that password, instead of 
storing encryption key inside your program. With you current scheme, if anyone 
breaks your 'common' key, everyone will be able to circumvent your parental 
protection.

-- 
Gleb Dolgich
http://pixelespressoapps.com_______________________________________________

Cocoa-dev mailing list (Cocoa-dev@lists.apple.com)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/cocoa-dev/archive%40mail-archive.com

This email sent to arch...@mail-archive.com

Reply via email to