Re: Storing a cryto key in .Net

From: Ram Sunkara [msft] (ramsun_at_online.microsoft.com)
Date: 10/22/03

  • Next message: Jacob Yang [MSFT]: "RE: Forms Authentication and SSL" 
    Date: Tue, 21 Oct 2003 19:46:50 -0700

    Use DPAPI.

    Make a command line executable that writes a DPAPI blob into your
    application configuration file. Let your application decrypt the DPAPI blob
    as when required to encrypt or decrypt.

    Deploying your application will now include running this executable in all
    the target machines.

    Put this command line executable in share and give execute only permissions
    to all the authorized users, explicitly deny coping this executable.

    Ram-

    "Morten Brun" <morten@pconsult.dk> wrote in message
    news:16obpv005egijsjtf9ntdmcjbpq87f2sqs@4ax.com...
    > Hi
    >
    > I am looking for some good suggestions to store a cryto key with my
    > new Asp.Net application using Triple Des to encrypt data. The database
    > is on SQL2000 server..
    >
    > My first idea was to store the key within the program, but as programs
    > can be easily obfuscated this is probably a bad idea.
    >
    > Any suggestion will be highly appreciated.
    >
    > Morten
    >
    >

  • Next message: Jacob Yang [MSFT]: "RE: Forms Authentication and SSL"

    Relevant Pages

    • RE: NTE_BAD_DATA
      ... They are NOT used DIRECTLY to encrypt / decrypt data; ... you should generate a RANDOM SESSION KEY and select a SYMMETRIC ENCRYPTION ... // imported from a BLOB read in from the source file or having ...
      (microsoft.public.platformsdk.security)
    • Re: Back Doors
      ... >> Design into the system a master key. ... Encrypt that with public key. ... Decrypt random symmetric key with private key. ...
      (sci.crypt)
    • Re: CAPI and RC4: can not decrypt when Final parameter is set to F
      ... to store ASYMMETRIC key pairs - never symmetric keys like RC4, ... Now when you need to encrypt at one place and decrypt at the other normally ... Get a HCRYPTPROV handle to a key container with CryptAcquireContext ...
      (microsoft.public.platformsdk.security)
    • Re: RSA - Public vs. Private Keys
      ... This is a common pattern for license software ... your client will send a unique machine hash to the ... will let us decrypt with a Public Key (or simply not ... |> RSA is intended to encrypt messages with public keys only. ...
      (microsoft.public.dotnet.security)
    • Re: .NET Crypto Classes Interoperability with Win32 Crypto APIs
      ... when i encrypt a string using .NET classes and try to ... > decrypt it using Win32 APIs, ... > UnicodeEncoding(); ...
      (microsoft.public.dotnet.security)