NAME

       Crypto::setEncryptionKey - Set application secret key

SYNOPSIS

       Void setEncryptionKey( [Int] key )

ARGUMENTS

       key  The  new encryption key. This must be an array of integers, containing exactly 32 integers between 0
       and 255. An Exception will be thrown if the parameter is unsuitable. For security, encryption keys should
       be generated from a good-quality random number source.

DESCRIPTION

       Sets  the  application  secret key used by Crypto.encode (3kaya) and Crypto.decode (3kaya) to a new value
       for the remainder of program execution. You can obtain the key from a variety of  sources  (e.g.  a  flat
       file,  or  a  database  entry) - the easiest way is probably to read 32 bytes from a file with IO.getChar
       (3kaya)
        Using an external application key removes the  requirement  that  the  application  binary  be  strongly
       protected  (by  moving  the requirement to whatever the key source is, of course). This may be useful for
       installing common web application binaries to a shared folder.

       Web applications should call this function from within their webconfig function  to  avoid  unpredictable
       results.  Also to avoid unpredictable results, this function may only be called once per program run, and
       must be called before any other function that uses the key. An Exception will be thrown if this is called
       for a second time or too late.

       Note:  While  an  unscrupulous  application  writer  could use this function to ensure that the effective
       application key could not be changed by  kaya-rekey  ,  they  could  find  far  easier  and  less  easily
       detectable ways to put a backdoor into any application that users were unable to recompile or verify.

AUTHORS

       Kaya  standard  library  by  Edwin  Brady,  Chris  Morris  and  others  (kaya@kayalang.org).  For further
       information see http://kayalang.org/

LICENSE

       The Kaya standard library is free software; you can redistribute it and/or modify it under the  terms  of
       the  GNU  Lesser  General  Public  License  (version  2.1  or any later version) as published by the Free
       Software Foundation.