[Mono-list] Linux version of DPAPI to encrypt Web.config data?

Bacchus Hraphanidousai phlogiston235@yahoo.com
Wed, 13 Oct 2004 05:42:28 -0700 (PDT)


I would like to explore my options in encrypting
sensitive data in the Web.config file and I came
across the DPAPI in Windows. 

First, here are my constraints:
[1] I am storing credentials that will be passed to
other processes, so a one-way hash won't work
[2] I prefer a symmetrical encryption algorithm for
simplicity and performance
[3] I cannot store the encryption key as a constant in
my code-behind file since this can easily be
disassembled

On Windows, DPAPI addresses these constraints, since
it manages encryption keys at the OS level.

My question is: when running ASP.NET applications on a
Slackware 10 Linux server using Mono 1.0.2, do I have
any similar options? Has anyone tried to encrypt data
in Web.config and App.config files for Mono
applications? Are there any articles or code samples
that I can refer to?

It seems like there should be a very good API layer
for managing data encryption in Linux, but what are
those APIs and how can I access those them from
managed code?

Thanks for any help or advice you can offer!


		
_______________________________
Do you Yahoo!?
Declare Yourself - Register online to vote today!
http://vote.yahoo.com