Encrypted XML in framework 1.1

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Kim H - 12 Mar 2007 12:52 GMT

I have been working with signed XML in .NET framework 1.1 using the
SignedXml class.
Now I also have to handle signed and encrypted XML, but does framework 1.1
support encrypted XML at all?
I can see .NET 2.0 does, but I have my doubts about 1.1.

Thanks,
Kim

Reply to this Message

Valery Pryamikov - 13 Mar 2007 20:37 GMT

> I have been working with signed XML in .NET framework 1.1 using the
> SignedXml class.
[quoted text clipped - 4 lines]
> Thanks,
> Kim

you can always encrypt it yourself. Remember however that if you are
using sign then encrypt order of operations, then you have to
serialize xml in explicit cannonical form first, calcuate hash of
cannonical xml data, and then encrypt it with CBC mode and random IV
prepended to the text. After that you put result in xmlenc element and
you are done. All could be done in about 100 lines of code.

-Valery.
http://www.harper.no/valery

Reply to this Message

Valery Pryamikov - 13 Mar 2007 20:38 GMT

> I have been working with signed XML in .NET framework 1.1 using the
> SignedXml class.
[quoted text clipped - 4 lines]
> Thanks,
> Kim

And btw - my advise for you is to use WSE. It gives you signed and
ecrypted xml almost for free.

-Valery.
http://www.harper.no/valery

Reply to this Message

Dominick Baier - 13 Mar 2007 20:17 GMT

I am assuming the SignedXml class is already coming from WSE - IIRC the encryption
equivalent is called EncryptedData...

-----
Dominick Baier (http://www.leastprivilege.com)

Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

>> I have been working with signed XML in .NET framework 1.1 using the
>> SignedXml class.
[quoted text clipped - 9 lines]
> -Valery.
> http://www.harper.no/valery

Reply to this Message

Valery Pryamikov - 14 Mar 2007 09:40 GMT

On Mar 13, 8:17 pm, Dominick Baier
<dbaier@pleasepleasenospam_leastprivilege.com> wrote:

> I am assuming the SignedXml class is already coming from WSE - IIRC the encryption
> equivalent is called EncryptedData...
[quoted text clipped - 3 lines]
>
> Developing More Secure Microsoft ASP.NET 2.0 Applications (http://www.microsoft.com/mspress/books/9989.asp)

Yes, Dominick is right,
SignedXml class is comming originally from WSE, even so it was made as
part of framework from v2.0.

-Valery.
http://www.harper.no/valery

Reply to this Message

Encrypted XML in framework 1.1

Free Magazines