Re: passing username/passwd between two processes securely...

Hi John!
Thanks Jochen!
p1 ----encrypt data in shared memory---> p2
p2 uses private key to decrypt it.
however how p2 get the private key?

There is no need to pass a private key to the other process. Only the public keys must be exchanged. And this public key can be seen by others, they cannot read the decrypted message with this keys.

In my case we expect the private key is passed from p1. 

As I said: No need to pass private keys...

If someone can attach to your process, then it also can read the username/password from your memory. So your problem has nothing to do with inter-process-communication...

Currently we don't consider this kind of attack. I only want to pass data without exposing to the 3rd process. So In my case the data could be clear text as long as it's not accessable in 3rd process. Shared memory problem is every process can open it if name is known.

As I said: This is no problem, beacuse no other programm can read un uncrypt your data... (at least not in the next 100 years).

Please read some docu about Public-Key-Crypthographie:
http://en.wikipedia.org/wiki/Public-key_cryptography


I heard people say using p1 as parent process to launch p2. using windows pipe to restrict every other melicious process to access. Is that possible? 

See other reply...

--
Greetings
  Jochen

   My blog about Win32 and .NET
   http://blog.kalmbachnet.de/
.

Relevant Pages

  • Re: to CallieDreamer-help
    ... When you crypt a file or text with PGP, remember to crypt with all the public keys of the people that have to read it. ... If you don't crypt with your public key too, you cannot decrypt, because there's no private key corresponding with the ones you used to crypt. ...
    (comp.security.pgp.test)
  • Re: passing username/passwd between two processes securely...
    ... p2 uses private key to decrypt it. ... Shared memory problem is ... pipe to restrict every other melicious process to access. ...
    (microsoft.public.win32.programmer.kernel)
  • Re: CryptAPI(encryption/decryption)
    ... It seems like you're missing the Base64 decode step when trying to decrypt ... I misspelled the Private Key as Primary Key. ... Is there any variation in the encryption format in openssl compared to ... "Dylan DSilva " wrote: ...
    (microsoft.public.pocketpc.developer)
  • [OT] Re: Basic question about Public Private Key Pairs
    ... > and private keys allow me to decrypt, but vice versa is not possible (or ... a public key and a corresponding private key. ... You can encrypt something with each key; ...
    (microsoft.public.dotnet.security)
  • Re: CryptAPI(encryption/decryption)
    ... since symmetric encryption is faster than public key encryption. ... As per your reply I could get the handle of the private key. ... possible for B to decrypt the data using his Private Key. ... The PFX format encrypts the private key with the user supplied password ...
    (microsoft.public.pocketpc.developer)