«

Hi,



Is there a way to get the encrypted bits from a SecureString, rather than
pinning it down and getting it's actual, decrypted value in unmanaged
memory?

What I would like to do is simply compare the unicode encrypted string in
the database with the unicode eyncrypted string passed by the client to the
web service. Presumably I cannot use SecureString to do this and will have
to roll my own encryption?




Robin

Yes, you'd need to roll your own encryption. Typically, the most difficult
part of getting this secure is coming up with a secure means of exchanging
keys. That's why SSL is generally regarded as good (it does this well and
has been well tested).

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"RMT" <> wrote in message
news:e645n5$pi0$1$...
> Hi,
>
>
>
> Is there a way to get the encrypted bits from a SecureString, rather than
> pinning it down and getting it's actual, decrypted value in unmanaged
> memory?
>
> What I would like to do is simply compare the unicode encrypted string in
> the database with the unicode eyncrypted string passed by the client to
> the web service. Presumably I cannot use SecureString to do this and will
> have to roll my own encryption?
>
>
>
>
> Robin
>

Okay tyvm.

"Joe Kaplan (MVP - ADSI)" <> wrote
in message news:...
> Yes, you'd need to roll your own encryption. Typically, the most
> difficult part of getting this secure is coming up with a secure means of
> exchanging keys. That's why SSL is generally regarded as good (it does
> this well and has been well tested).
>
> Joe K.
>
> --
> Joe Kaplan-MS MVP Directory Services Programming
> Co-author of "The .NET Developer's Guide to Directory Services
> Programming"
> http://www.directoryprogramming.net
> --
> "RMT" <> wrote in message
> news:e645n5$pi0$1$...
>> Hi,
>>
>>
>>
>> Is there a way to get the encrypted bits from a SecureString, rather than
>> pinning it down and getting it's actual, decrypted value in unmanaged
>> memory?
>>
>> What I would like to do is simply compare the unicode encrypted string in
>> the database with the unicode eyncrypted string passed by the client to
>> the web service. Presumably I cannot use SecureString to do this and
>> will have to roll my own encryption?
>>
>>
>>
>>
>> Robin
>>
>
>