{"action":"created","issue":{"url":"https://api.github.com/repos/defuse/php-encryption/issues/60","labels_url":"https://api.github.com/repos/defuse/php-encryption/issues/60/labels{/name}","comments_url":"https://api.github.com/repos/defuse/php-encryption/issues/60/comments","events_url":"https://api.github.com/repos/defuse/php-encryption/issues/60/events","html_url":"https://github.com/defuse/php-encryption/issues/60","id":77696423,"number":60,"title":"Best way to store the cypher key","user":{"login":"bab55z","id":2848498,"avatar_url":"https://avatars.githubusercontent.com/u/2848498?v=3","gravatar_id":"","url":"https://api.github.com/users/bab55z","html_url":"https://github.com/bab55z","followers_url":"https://api.github.com/users/bab55z/followers","following_url":"https://api.github.com/users/bab55z/following{/other_user}","gists_url":"https://api.github.com/users/bab55z/gists{/gist_id}","starred_url":"https://api.github.com/users/bab55z/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bab55z/subscriptions","organizations_url":"https://api.github.com/users/bab55z/orgs","repos_url":"https://api.github.com/users/bab55z/repos","events_url":"https://api.github.com/users/bab55z/events{/privacy}","received_events_url":"https://api.github.com/users/bab55z/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":11,"created_at":"2015-05-18T15:21:51Z","updated_at":"2015-05-27T15:32:10Z","closed_at":null,"body":"What is the best way to store the key used to encrypt data?\r\n\r\nI used base64_encode/decode my cypher key and then save it to a file, but this is not advised according to the crypto class comments.\r\n\r\nThus, I am asking what are or is the best way to store a cypher key to avoid leaks and attacks.\r\n\r\nthanks."},"comment":{"url":"https://api.github.com/repos/defuse/php-encryption/issues/comments/105961368","html_url":"https://github.com/defuse/php-encryption/issues/60#issuecomment-105961368","issue_url":"https://api.github.com/repos/defuse/php-encryption/issues/60","id":105961368,"user":{"login":"paragonie-scott","id":11591518,"avatar_url":"https://avatars.githubusercontent.com/u/11591518?v=3","gravatar_id":"","url":"https://api.github.com/users/paragonie-scott","html_url":"https://github.com/paragonie-scott","followers_url":"https://api.github.com/users/paragonie-scott/followers","following_url":"https://api.github.com/users/paragonie-scott/following{/other_user}","gists_url":"https://api.github.com/users/paragonie-scott/gists{/gist_id}","starred_url":"https://api.github.com/users/paragonie-scott/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/paragonie-scott/subscriptions","organizations_url":"https://api.github.com/users/paragonie-scott/orgs","repos_url":"https://api.github.com/users/paragonie-scott/repos","events_url":"https://api.github.com/users/paragonie-scott/events{/privacy}","received_events_url":"https://api.github.com/users/paragonie-scott/received_events","type":"User","site_admin":false},"created_at":"2015-05-27T15:32:10Z","updated_at":"2015-05-27T15:32:10Z","body":"Sure, you can ASCII escape them. I'm still going to write a constant-time `bin2hex()` and `hex2bin()` to eliminate side-channels, however."}}