Java security api - DCE 128bit encryption with .NET

From: RonF (RonF_at_discussions.microsoft.com)
Date: 07/21/05

  • Next message: Joe Kaplan \(MVP - ADSI\): "Re: Please Help!-Trying to brows my asp.net application but I get a logon prompt-" 
    Date: Thu, 21 Jul 2005 14:22:04 -0700

    iI have a web app that currently gets the userID from a 509 client cert.
    Works great.

    A new client wants to interface our web app in a WebSphere Portal with a
    single signon for their clients so they want to call our default page via a
    post and pass the userID in an encrypted query string. Their encryption will
    use a Java security api - DCE 128bit encryption.

    Using ASP.NET is there a way to either call the Java API, or use an API that
    is compatible with ASP.NET so that I can successfully decrypt their supplied
    string? Assuming of course that we have access or know any required keys ...
    our client wants to interface with our web app so the use of any of their
    keys to make this happen is reasonable.

    I have searched the net with the words in the subject and have not been able
    to find much in the way of details of the Java API or the compatibility of
    the Java and .net encryption .NET classes/APIs.

    Any advice or suggestions would be greatly appreciated.

    Thanks ...

    Ron

  • Next message: Joe Kaplan \(MVP - ADSI\): "Re: Please Help!-Trying to brows my asp.net application but I get a logon prompt-"

    Relevant Pages

    • Java security api - DCE 128bit encryption with .NET
      ... I have a web app that currently gets the userID from a 509 client cert. ... use a Java security api - DCE 128bit encryption. ... Using ASP.NET is there a way to either call the Java API, ...
      (microsoft.public.dotnet.security)
    • Re: Java security api - DCE 128bit encryption with .NET
      ... I saw your post in the other newsgroup, but didn't know what this DCE thing ... >I have a web app that currently gets the userID from a 509 client cert. ... > Using ASP.NET is there a way to either call the Java API, ...
      (microsoft.public.dotnet.security)
    • RE: Cannot decrypt files encrypted using Crypto API on a different
      ... previous message which uses the recipien't public key.) ... KEK (key encryption key) to protect the session key. ... embedded into your client app and server code). ... but what is the point to encrypt the data if ANYBODY can decrypt it (since ...
      (microsoft.public.platformsdk.security)
    • Re: username and Password sent as clear text strings
      ... encryption of the traffic. ... SSL is used. ... client, it would seem like too much hassle for a low possibility hack. ... This is how all web applications on the planet work today by design. ...
      (Pen-Test)
    • Re: username and Password sent as clear text strings
      ... encryption of the traffic. ... SSL is used. ... client, it would seem like too much hassle for a low possibility hack. ... This is how all web applications on the planet work today by design. ...
      (Pen-Test)