title: How does keytool protect keys?
body: <p>When you are building a key store with the Java Keytool utility, how are the keys protected?  I've read through the documentation, and I realize that each private key has a key password, and then the store has a store password.</p>
  
  <p>But what mechanism is used to protect the data?  Is it an encryption cipher?  If so, what is the algorithm?  I'm focused specifically on how keytool does the protection when it is building a JKS file.</p>