Re: Size of Entropy with Dpapi Encrypted Connection String

From: Dominick Baier [DevelopMentor] (dbaier_at_pleasepleasenospamdevelop.com)
Date: 03/13/05

  • Next message: Phil Czapla: "Re: Size of Entropy with Dpapi Encrypted Connection String" 
    Date: Sat, 12 Mar 2005 17:36:30 -0800

    Hello Phil C.,

    you can pass in as much entropy as you want - understand - this only "seeds"
    the key that is already used for DPAPI.

    ---------------------------------------
    Dominick Baier - DevelopMentor
    http://www.leastprivilege.com

    > Hi. I'm using the dpapi to encrypt a sql server connection string.
    > Strictly speaking
    > how many bytes of entropy am I supposed to use??
    > Phil Czapla
    > Boston, Massachusetts

  • Next message: Phil Czapla: "Re: Size of Entropy with Dpapi Encrypted Connection String"

    Relevant Pages

    • Re: Securing static files
      ... Dominick Baier - DevelopMentor ... they are kicked back to the login page. ... The user may log in with other credentials. ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: How to determine if the logged on user is in a group
      ... Dominick Baier - DevelopMentor ... I found that you to reboot the SERVER after you create a new group and put users in it so that the new group and the users appear in the whoami list on the server. ... although he is a member of these groups. ...
      (microsoft.public.dotnet.security)
    • Re: HOWTO: Prevent Dynamic Loading of internal Types
      ... Dominick Baier - DevelopMentor ... Henning Krause ... I could get the public key from the entry assembly via ...
      (microsoft.public.dotnet.security)
    • Re: How to call Web Service Securely
      ... which .net version - which type of authentication (username/password against a db??) ... Dominick Baier - DevelopMentor ... make a web method via dialup to my IIS Web Service. ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: ASP.NET 2.0 Authorization Roles..Got Solution.
      ... the only difference is see with the provider and a normal WindowsPrincipal is, that the machine name for local groups gets stipped out. ... Dominick Baier - DevelopMentor ... I never used WindowsTokenRoleProvider earlier. ...
      (microsoft.public.dotnet.framework.aspnet.security)