Connection Strings app.config and encrypting

[Amy L.]

I have a .Net 2.0 windows forms application where a user will supply a
connection string for their database server during initial
configuration. I want to make sure this string is encrypted when its
stored in the app.config file or whatever xml based configuration file I
use. I can encrypt the data using the built in crypto classes in .Net,
but the question comes in how can I securely store the keys used for
encryption.

Is there any best practices or advise on going about doing this? Maybe
something even built into .Net for this?

Amy.

 

[raylopez99]

I have a .Net 2.0 windows forms application where a user will supply a
connection string for their database server during initial
configuration. I want to make sure this string is encrypted when its
stored in the app.config file or whatever xml based configuration file I
use. I can encrypt the data using the built in crypto classes in .Net,
but the question comes in how can I securely store the keys used for
encryption.

Is there any best practices or advise on going about doing this? Maybe
something even built into .Net for this?

Amy.

It's over my head. Crypto stuff is pretty complicated but I noticed
reading some ads in Dr Dobbs Journal that a number of people have
crypto libraries that are cheap (less than $500) and easy (they say)
to use in VS.

If you're a professional programmer, I would just buy one of those.

RL