I want to create a key for my realm database wich work with AES-256 and for encryption wants a byte[64]
key.
I read this good question about create a key from 4 digit number: “Encryption Key derivation from numeric PIN?”, and this good article about hashing security: “crackstation.net : Salted Password Hashing - Doing it Right”.
I understand that a salt is some random string that creates every time user change their pass or login. But where and how should I save the “salt” string?
The article mention above states…
The salt should be stored in the user account table alongside the hash
…but my database is what I want to encrypt.