encrypt password in config file

[Guest]

Hello All:

I want to encrypt a username/password inside a config file that will be read
and decrypted by a .dll. I have discovered many ways to do this looking at
Google but was wondering if anyone could recomend one method over another.
Any thoughts?

 

[Guest]

Hi,

DPAPI might be a good idea.

MSDN lists different options available in the section hosting the DPAPI How
To
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/html/SecNetHT07.asp

 

[Guest]

Thanks. I'll try it.

 

[rossum]

Hello All:

I want to encrypt a username/password inside a config file that will be read
and decrypted by a .dll. I have discovered many ways to do this looking at
Google but was wondering if anyone could recomend one method over another.
Any thoughts?

No actual need to decrypt. If you encrypt the password that the user
enters then you just have to check that the two encrypted versions
match. Depending on how secure you want things to be you could even
use a one-way encryption that cannot be decoded.

rossum



The ultimate truth is that there is no ultimate truth

 

[Guest]

Alright. Thanks for the clarification.

No actual need to decrypt. If you encrypt the password that the user
enters then you just have to check that the two encrypted versions
match. Depending on how secure you want things to be you could even
use a one-way encryption that cannot be decoded.

rossum



The ultimate truth is that there is no ultimate truth