Here's a foundation to build a module for processing your secrets outside your application. Read Article
About Steve Syfuhs
Steve Syfuhs is a developer on the Windows Cryptography, Identity, and Authentication team at Microsoft building authentication stuff for all your favorite operating systems.
Threat Modeling can be a boring and tedious process -- especially when you're just starting out. Here's an exaggerated look at how to think and model threats.