Start Method for Application Cryptographic Keystores

An apparatus, comprising:

• a processor;
• a computer-readable storage device;
• and
• logic, stored on the computer-readable medium and executed on the processor, for:
• encrypting a resource associated with an application with a first key;
• generating, at an install time of the application, a first hash code for an executable daemon associated with the application;
• encrypting the first key with the first hash code to produce a protected first key;
• generating, at a load time of an application, a second hash code for the executable daemon;
• deriving the first key by decrypting the protected first key using the second hash code to produce a derived first key;
• and
• accessing the resource by the executable daemon by employing the derived first key.

A computer programming product, comprising:

• a computer-readable storage device;
• and
• logic, stored on the computer-readable medium for execution on a processor, for:
• encrypting a resource associated with an application with a first key;
• generating, at an install time of the application, a first hash code for an executable daemon associated with the application;
• encrypting the first key with the first hash code to produce a protected first key;
• generating, at a load time of an application, a second hash code for the executable daemon;
• deriving the first key by decrypting the protected first key using the second hash code to produce a derived first key;
• and
• accessing the resource by the executable daemon by employing the derived first key.

An automated application startup device, comprising:

• a processor;
• a computer-readable storage device coupled to the processor;
• and
• logic, stored on the computer-readable medium and executed on the processor, for:
• encrypting a resource associated with an application with a first key;
• generating, at an install time of the application, a first hash code for an executable daemon associated with the application;
• encrypting the first key with the first hash code to produce a protected first key;
• generating, at a load time of an application, a second hash code for the executable daemon;
• deriving the first key by decrypting the protected first key using the second hash code to produce a derived first key;
• and
• accessing the resource by the executable daemon by employing the derived first key.