Explaining Keystores | Part 1 - JKS

If you write a Java application that uses cryptography, chances are you’ll have to store some cryptographic keys. The Java crypto APIs provide an abstraction for dealing with this called keystores.

References:

/////
/////

Cryptosense CEO Dr. Graham Steel was formerly an academic researcher before founding Cryptosense in 2013. His cryptography expertise is the basis for the company's 'Analyzer' technology which allows customers to protect themselves against losing sensitive data.

[ruixue]

0:12 what is a (Java) keystone
2:37 the way it works in *jks keystore*
2:59 there is a *password* in the keystore
3:10 the password is hashed 3:20 *salt* is hashed
3:40 this is *not a very strong cryptography*
4:00 very easy to guess the password with brute-force
4:39 *Hashcat*
4:55 in the Oracle Java since end of 2017, jus *keystone is deprecated*
5:18 *integrity checking*

[gnuPirate]

I'm tired and need to get to bed, but just need to comment that I can tell from a couple of views that this is an excellent series, and I look forward to learning what I can from it. Very well explained, and debunking some common security malpractices / misconceptions. Thank you sir!

[timpaul]

If any body can understand all that jargon they don't need your explanation...

[doogkcul]

This video has great info. But it would be great if you can modularize and make it small chunks with abstract at first to being more clear on the way to the end. Like if you are speaking about an electric switch you can say "switch is used to switch an electric device on or off" and after that going into deeper concepts so that amateur like me can understand better. Pls ignore if I make zero sense. Thanks

[gunnerandersen]

I thought that Metamask used JKS to store the user key's.

[JanJakubSeveneri]

How can I open KEYSTORE file to see the contents?

[banagan]

I can't access myetherwallet with my keystore file. It keeps giving me an error message. I've tried other keystore files which also don't work. Is it possible to extract the private key from the file? Thanks

[dannyzucotv]

I lobe this videos but can I get my private key from my keystore. Thanks

[hajarsindi]

Hello sir sorry for my bad English but my question is .is this jks can protect android apps from being hacked or being cheated like can they use this file like anti cheating system thank you

[jeffreytillwick]

Why can't java just access the .crt and .key like EVERY OTHER WEB SERVER does? When I write a C# web server, I just put the path to the crt and key files. DONE. WHY? I HATE JAVA!!!