I'm developing application in Java that has to store RSA keys in software for foreseeable future (that is, at least 10 years).
The two most common standards of storing private keys are PKCS12 and JKS (Java Key Store). While PKCS12 supports many different algorithms, even the most secure ones are based on 3DES with SHA1. JKS is even worse as the default is based on MD5 and 3DES.
The Bouncy Castle Java library version of JKS is a bit better as it uses
PBEWithSHAAndTwofish-CBC for "UBER" version of its key store format.
Are there any standard formats of private key storage that support encrypting the key pair using AES and SHA-2?