Re: How to encrypt/decrypt serialized data

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Michael Meyer wrote:
hi,

I am writing a small client server application. The client is a
desktop application(C# .NET 2.0) and the user needs to login into the
server. The user has to enter username and password. I offer the
possibility to store username and password. I save the data into a
serialized object into the document and settings folder. Now I would
like to encrypt the stored data. Can someone give me a hint how to do
this.

See
http://msdn.microsoft.com/en-us/library/system.security.cryptography.protecteddata.aspx

This will encrypt the data so that only the currently logged in user can get
to it, other users or someone who steals the hard disk will see only
garbage. Any other method will require you to provide an encryption key,
which you'll either have to get from the user, defeating the purpose of
saving their credentials, or store somewhere that your application can find
it... but if your application can find it so can a hacker. Use the
ProtectedData class so everything gets encrypted using the Windows login
credentials.


Regards

Michael


.



Relevant Pages

  • Re: HTTP and HTTPS sessions question
    ... become HTTPS only when log off. ... to enter your login credentials. ... you need their public key to send them an encrypted e-mail (which ... later want to encrypt e-mail that you send to them using their public key). ...
    (microsoft.public.windowsxp.general)
  • Re: HTTP and HTTPS sessions question
    ... become HTTPS only when log off. ... to enter your login credentials. ... you need their public key to send them an encrypted e-mail (which ... later want to encrypt e-mail that you send to them using their public key). ...
    (microsoft.public.windowsxp.general)
  • Re: Suggestions For The Passing of Passphrases
    ... communication which includes the login or password. ... or encrypt passwords, such as getting the guy a message that says Im ... sending you a passphrase but its ROT13'd ...
    (sci.crypt)
  • Re: reading secured ntfs partition
    ... When you login, THAT is your password. ... owner or admin to request a change in permissions. ... If EFS (encrypted file system) was employed to encrypt the files, ... security product then it is up to you to remember the admin or master ...
    (alt.computer.security)
  • Re: Verify Linux Password
    ... > My servlet receives the username and password as part of a login ... I just need to verify and get on with my business. ... password is to encrypt the password that was provided and compare that ... requires my login password. ...
    (comp.lang.java.help)