title: Where to Store Encryption Keys MVC Application
body: <p>I am using a AES encryption/decryption class that needs a key value and vector value encrypt and decrypt data in an MVC3 application.</p>
  
  <p>On saving the record I am encrypting the data then storing in a database.  When i retrieve the record i am decrypting in the controller and passing the unencrypted value to the view. </p>
  
  <p>The concern is not protecting data as it traverses the network but to protect the database should it be compromised.</p>
  
  <p>I have read many posts that say dont put the keys for encryption in your code.  </p>
  
  <p>Ok so where should they be kept?   File system?  Another Database?</p>
  
  <p>Looking for some direction.</p>