什么算法在web.config中encyrption使用RSAProtectedConfigurationProvider? [英] What algorithms are used by RSAProtectedConfigurationProvider in web.config encyrption?

查看:169
本文介绍了什么算法在web.config中encyrption使用RSAProtectedConfigurationProvider?的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着小编来一起学习吧!

问题描述

我找不到MSDN文章/ DOC声明算法由RSAProtectedConfigurationProvider加密为ASP.NET Web应用程序的web.config文件的部分时,用什么(谷歌搜索小时后)。我记得读,它使用的RSA密钥和3DES实际的连接字符串。

I cannot find (after hours of googling) the MSDN article/doc that declares what algorithms are used by the RSAProtectedConfigurationProvider when encrypting a section of the web.config file for an ASP.NET web application. I recall reading that it uses RSA for the key, and 3DES for the actual connection string.

在加密web.config文件中使用默认RSAProtectedConfigurationProvider(密钥和数据两者)时所使用的算法是什么?有人可以提供一个链接到这个合适的MSDN文章或其它文件?

What algorithms are used in encrypting the web.config file when using the default RSAProtectedConfigurationProvider (for both the key and the data)? Can someone provide a link to the appropriate MSDN article or other documentation on this?

推荐答案

RSA(自然)用作用于保护被加密并存储沿着受保护数据的对称密钥的非对称算法

RSA (naturally) is used as the asymmetric algorithm that is used to protect the symmetric key that is encrypted and stored alongside the protected data.

如果你看看在反射器相关的code,有一个强有力的迹象表明,对称算法用于保护数据的AES256(http://www.w3.org/2001/04/xmlenc#aes256 -cbc),虽然TripleDes的也支持。

If you look at the relevant code in Reflector, there's a strong indication that the symmetric algorithm used to protect the data is AES256 ("http://www.w3.org/2001/04/xmlenc#aes256-cbc") although TripleDES is also supported.

使用反射器或JustDecompile并看看:

Use Reflector or JustDecompile and have a look at:

公开的EncryptedData加密(XmlElement的inputElement,串注册表项目);
声明类型:System.Security.Cryptography.Xml.EncryptedXml

public EncryptedData Encrypt(XmlElement inputElement, string keyName); Declaring Type: System.Security.Cryptography.Xml.EncryptedXml

这篇关于什么算法在web.config中encyrption使用RSAProtectedConfigurationProvider?的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!

查看全文
登录 关闭
扫码关注1秒登录
发送“验证码”获取 | 15天全站免登陆