How to hide the private key in the application?

Question

Encryption

Suppose in an application in the code, the RSA private key is set as a text constant, which is used to encrypt the settings of this application.
It is good if the private key is constant so that the saved settings can always be decrypted.

How can I hide the given private key so that it cannot be found through the disassembler?

Answer 1

The private key from the application code can always be pulled out, the only question is how much the attacker will get confused by this.
If you really need to encrypt application settings, I would consider having a master password and prompting the user for it when the application starts.