I have a webApplication in which i want to encrypt the data using Public key and whan it reach to the destination webapplication it will decrypted there with corresponding private key . Is there is any way to creating this pair of key?
I want to encrypt the password entered by the user....how do i go about it?is there any built-in function for it or will i be required to write a code for it?
I have a problem hopefully someone out there will steer me in the right direction.
I have a web application that I am going to put on a standalone cd - currently the data is "Safe" because the database is in in the app folder and the code is located in the codebehind.
My problem is i'm putting this on a CD as a standalone site, anyone can access the database, or find the XML....
Is there a way to generate an encrypted Database / XML Page, that is complied with the CD, that the program can decrypt and access with a embedded key?
I received some code, a small c# asp.net application which manually posts a shared username/pwd to a 3rd party website for auto-logins from our intranet site. During transit the password is encrypted, but not within the application. Within this application a namevaluecollection is used and the username and password are hard coded. Originally the thought was, who cares if its hard coded because its shared between everyone anyway. Now we want to encrypt the username and password from within the application. I'm not sure the best way to accomplish the goal of making sure the password is encrypted "at rest". Normally I've seen passwords stored and encrypted within a database. I know we'll obviously have to move the password out of the application and store it somewhere else, I'm just not sure where. Do we move the username and pwd to the web.config file? I really am not sure the best way to approach this.
I'm trying a simple encryption procedure, encrypting/decrypting a HEX value. Encryption seems to work fine: result of encryption is "85772B6784BC1505". While trying to decrypt I get an "Invalid data"-exception.
CODE:
Dim x1 As UInt64 = DES.DES_EncryptCode("&H" & "0123456789ABCDEF") Dim x2 As UInt64 = DES.DES_DecryptCode(x1) Private Shared KEY_64() As Byte = {7, 6, 5, 4, 3, 2, 1, 0} Private Shared IV_64() As Byte = {0, 1, 2, 3, 4, 5, 6, 7}
A bit more background info as suggested:I'm finsihing of an Intranet CMS web app where I have to use the products API (ASP.NET based). Because of time constraints and issues with Windows authen' I need another way to ensure staff do not need to re login everytime they visit the site to view personalised content. The way it works is that once a user logs in (username/password), a Session ID storing a new different Security context value is generated that is used to display the personalised content. The API login method called uses the username and password as parameters. The only way I can think of automatically logging in the next time the staff visits the site is by storing the password in a enrypted cookie and checking of its existing when the site is visited and then calling the API login method using the username and decrypted password cookie values.Any other ideas as an alternative welcomed.'m using some code found on the web to encrypt and decrypt a password string. It encrypts fine but when it calls the code below to decrypt the string it throws the error "Length of the data to decrypt is invalid" How can I resolve this?
I have two sub routines that I've created to pull in my Membership user roles and assign the value/name of that role to the value of a cookie.
My first subroutine looks like this
[Code]....
At this point, role ID is a 1-dimentional array which is not acceptable for a cookie's value (it must be a string), but in Debug mode, I can see that the array does contain the correct roleID value. In my 2nd subroutine I change the value from array to string for no other reason than that it gives me an opportunity to see that the value of CookieValue() before it is converted does have the correct roleID.
[Code]....
Even though it still shows that string as having the correct value, it returns the object "System.String[]"
We have a problem regarding decrypting the web.config... We encrypted the web.config in computer A. but we need it to decrypt it in computer B.
we got an error
"Failed to decrypt using provider 'DataProtectionConfigurationProvider'. Error ssage from the provider: Key not valid for use in specified state. (Exception om HRESULT: 0x8009000B) (D:WCFSearchweb.config line 17)
Key not valid for use in specified state. (Exception from HRESULT: 0x8009000B) Failed!"
we also tried the RSAProtectedConfigurationProvider and we're not able decrypt also...
I search google and found this unfortunately we can't decrpyt it... How do i include the key? do i need to copy and paste it?
I have an internal web application which uses a custom encryption class to convert strings to varbinary(50) columns in SQL. When I display the table in a GridView, I want to use the RowDataBound event to decrypt the encrypted column back to a string to display.
Currently I have the following in my RowDataBound event:
[Code]....
This throws an exception when I try to load the page: TransformFinalBlock - Length of the data to decrypt is invalid.
I have tried just fetching the data from SQL in my query but the e.Row.Cells(3).Text evaluates to System.Byte[], so I tried using CAST([EncrytedColumn] AS varchar(50)) to convert the varbinary(50) to varchar(50), but this still resulted in the same exception being thrown.
My only solution so far has been to manually fetch the SQL data into a DataTable and decrypt the column before displaying it in the GridView, but I prefer the automated method of binding the SQLDataSource to the GridView.
I have a content-sensitive firewall between my clients and my server. If we exclude SSL solution (it's not available in my case) then I was thinking of a javascript library which encrypts custom fields at client-side and a .NET class decrypts them at server-side. Is there any solution out of the box (maybe a server control) ?
I have an asp.net database which has users table. In this table password is saved as sncrypted. Now, I am creating my own users table. I want to copy user's data from my old table t this table. I can to decrypt old users table password. Which encryption technique is used by default in aspnet database for passwords.
[URL]UserFiles/ArticlesFiles/633574997433655321_Raja_images.jpg when I click any of secure page like (user page , admin or user ) and I am not login then it will show me in url like this http://localhost:59847/FormsAuthenticationAdvanced/login.aspx?ReturnUrl=/FormsAuthenticationAdvanced/secure/securepage.aspx & displays login form. After login it will redirect me to that respective page which I clicked ( like if secure page is clicked before login then after login it will redirect me to secure page ).
I have tried everything all day and cannot figure this out.
I tested the Insert Statement in MS Access and it works.
INSERT INTO user ([user_login], [email], [create_date]) VALUES ('user67', 'suesargis@yahoo.com', '11/15/2010 8:18:14 PM';
So how do I add the apostrophes in the string below to get the above when using executenonquery.? The string produces everything ok but it is missing the apostrophes.
Ok I created a web app with membership & role, intially I had 2 db but combined data with the default aspnetdb.mdf created to simplify.I then used "copy web" to move all asp files & roles folders to remote server in a sub domain directory.Created a backup of the aspnetdb.mdf and then ftp to sub domain directory which was then loaded by the host as MS SQL db name: aspnetdb3.Now, I know I need to change the web.config connection settings but to what???here is the initial connection setting:
MembershipUser newUser = Membership.CreateUser(UsernameTextbox.Text, PasswordTextbox.Text);In web.config i have connection string but i would like to use MemBershipUser on different connection string.
I've bee successfully using the Asp.Net Membership Provider in my VB.Net 3.5/SQL 2005 web app for a year now (Site A). However, I've added 2 new sites (B and C) (both with their own DB) and now I see a problem. It looks like users that get created for sites B and C also get created in site A. Roles that I create for B and C only get created in A. I think it is a conn string problem.When I created A, I adde the conn string to my machine.config (not sure why I did this or if it is even needed)...
Because of the way the server is set up I'm using, I don't think I can use Integrated Security=SSPI in my SQLConnection string. However, I'm a bit wary of giving the database username and password in the connection string in a aspx.cs file. Is there any way of making it more secure?
I have a java application that send to a aspx page the user name and password in a Query String. How can I authenticate the user in this aspx web page, and how can I avoid that a user copy the link in the internet explore and acces to the page.
