key storage

[Eric S. Johansson]

Ajay wrote:

> hi!
> i am building a web application. for client authentication, i am using
> cookies which include the HMAC of the data.
> the server also has a public/private key pair for signing and verifying
> information.

start here.  This is a really good site for Web based authentication 
techniques.  I've implemented the system and you are more than welcome 
to the code.  It may need some disentangling from my CGI/form 
support/template environmentbut don't say you weren't warned.  ;-)

http://cookies.lcs.mit.edu/pubs/webauth.html

let me know if I can help

--- eric