Re: Encrypt a UsernameToken Authenticated WSE Response

you can encrypt with a UsernameToken too.
both the client and the server know the password,
so that is used to generate a key to encrypt with.

on the client Request you add something like this line:
serviceProxy.RequestSoapContext.Security.Elements.Add(new
EncryptedData(token));

the server Response adds something like this :
ResponseSoapContext.Current.Security.Tokens.Add(usernameToken);
ResponseSoapContext.Current.Security.Elements.Add(new
MessageSignature(usernameToken));
ResponseSoapContext.Current.Security.Elements.Add(new
EncryptedData(usernameToken));

Thanks,
casey
http://www.brains-N-brawn.com


"AndiRudi" <AndiRudi@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B7D49B82-C019-4262-BC3C-D8E3B97C8EB2@xxxxxxxxxxxxxxxx
> Is there any other possibility than x509 to enrcypt a Response. Something
> symmetic would be nice.


.

Relevant Pages

  • Re: A cryptography solution for a client/server winforms app
    ... good idea if you want to learn crypto. ... you control both the client and server, you don't even need to use a ... code the client to ignore certificate trust errors. ... encrypt the memory stream. ...
    (microsoft.public.dotnet.security)
  • Re: File ENcryption Problem Detail
    ... > In addition, when u encrypt remotely (client to server), which users ... We can encrypt remotely (client to server, ... >>> it is able to encrypt file locally on the DC, ...
    (microsoft.public.win2000.security)
  • Re: A cryptography solution for a client/server winforms app
    ... You could use a self-signed cert deployed with the server ... code the client to ignore certificate trust errors. ... generate a hash value for the data in the memory stream. ... encrypt the memory stream. ...
    (microsoft.public.dotnet.security)
  • Re: Password encryption
    ... I have source code to the database including ODBC server and ... can encrypt the password before passing it to us so we can remain ignorant ... support for AD integration so that customers can logon to our database ... i.e. they enter it into the ODBC/JDBC client. ...
    (microsoft.public.windows.server.active_directory)
  • Re: File ENcryption Problem Detail
    ... In addition, when u encrypt remotely (client to server), which users account ... We can encrypt remotely (client to server, ... >>> servers for remote EFS. ...
    (microsoft.public.win2000.security)
Loading