hello everybody,
i have a little problem with the oasis webservice security stack implemented
in the ms wse 2.0.
i have a webservice methode witch uses a user token for authentifikation. to
secure the soap message i use the default user token encryption with the
aes128. all the customers who use my "secure" methods over the .net
framework have no problems.
now i have a new customer who whants to consume my methodes over simple php
skrips. he has implemented the user token authentification manualy and it
works fine. now he whant's to implement the decryption/encryption over the
user token / aes128. but i don't find any material in the net how i generate
the 128 bit key for encryption/decryption of the message in the soap body.
can anybody help me? do you know recources in the net how the key
gerneration works? i have found no detailed information on the oasis
websites.
thank you for your help.
greetings from germany
stefan huber
casey chesnut - 27 Feb 2005 01:49 GMT
the method for generating the key is P_SHA1.
i wrote C# code for doing this on the compact framework.
you can get it at http://www.opennetcf.org with the SDF download
its in the OpenNetCF.Web.Services2 namespace.
XmlEncHandler class, EncryptXml method, look for P_SHA1.
Mono also has a WSE implementation,
so you might look there as well.
Thanks,
casey
http://www.brains-N-brawn.com
> hello everybody,
>
[quoted text clipped - 19 lines]
> greetings from germany
> stefan huber