Explaining Keystores | Part 6 - Bouncy Castle FIPS Keystore (BCFKS)

This is the 6th episode in our keystores series. Today Graham explains the Bouncy Castle FIPS keystore - BCFKS. Read more about the different Bouncy Castle keystores types here: cryptosense.com/blog/bouncyca...
Full series:
Part 1 - Java JKS Keystore • Explaining Keystores |...
Part 2 - JCEKS • Explaining Keystores |...
Part 3 - PKCS#12 • Explaining Keystores |...
Part 4 - Bouncy Castle BKS • Explaining Keystores |...
Part 5 - Bouncy Castle UBER • Explaining Keystores |...
/////
Find out more about Cryptosense: cryptosense.com/
Follow us on Twitter: / cryptosense
/////
Cryptosense CEO Dr. Graham Steel was formerly an academic researcher before founding Cryptosense in 2013. His cryptography expertise is the basis for the company's 'Analyzer' technology which allows customers to protect themselves against losing sensitive data.

[@someshbose]

this series is a hidden gem indeed

[@ericlaboob]

You really know your stuff. Subscribed.

[@Cryptosense]

Thanks Eric

[@xuderro198]

How to protect/store the password of BCFKS itself? The password is like a master password, how to protect the master password from FIPS compliant perspective?

[@Cryptosense]

Depending on where you are deploying, a cloud secret store or an HSM could be a good option. If you are pure software on a single VM or container, using a secret manager to keep the credentials out of development code can still be a good move.

[@weronpc]

It would be great if you have a whiteboard and a marker, I think a diagram as you talk will help us understand better. Anyway, I watch most of your videos and subscribe your channel

[@Cryptosense]

Thanks! We're working on getting some more equipment so hopefully that'll come soon