服务器端客户端之间的兼容加密库（Javascript - > C＃或Java） [英] Compatible Encryption Libraries between client a server side (Javascript -> C# or Java)

问题描述

有时候HTTPS是不够的。特别是当我们在谈论保护用户数据时，可以访问winsock32级别的用户名，他们可以用纯文本或者浏览器内存中已解密的已发布数据访问BHO对象。

在这种情况下，我开发了一个JavaScript - >经典的asp客户端服务器例程，其中JavaScript加密并发送ASP接收和解密的数据。它的工作非常好。

此解决方案是使用xICE加密构建的，它提供了JavaScript和PHP或ASP之间的良好兼容性。但现在我正在迁移到ASP.NET或Java，并且在XICE中没有这些环境的端口。

¿任何建议？

解决方案

根据JavaScript库，可能很容易移植到C＃，尽管你可能想要运行并重构一下。学习语言的最佳方式之一就是移植图书馆。否则，JS中有大量的实现方法，其他的。其中许多针对ActionScript和JavaScript进行了优化（与EcmaScript适当的一些细微差异）。

Sometimes HTTPS is not enough. Specially when we are talking about protecting user data from troyans with access at winsock32 level where they can sniff https in plain text or BHOs objects that already have access to the decrypted posted data in the browser memory.

In this scenario, I have developed a javascript -> classic asp client server routine, in wich the javascript encrypts and send the data received and decrypted by ASP. It works very fine.

This solution was built with xICE encryption wich offers a good compatibility between javascript and PHP or ASP. But now I'm migrating to ASP.NET or to Java and there's no port for these environments in XICE.

¿Any suggestion?

解决方案

Depending on the JavaScript library, it may be easy enough to port to C#, though you will probably want to run through and refactor it a bit. One of the best ways to learn a language is porting a library to it. Otherwise, there are plenty of implementations in JS for AES, and others. Many of these are optimized for ActionScript and JavaScript (some minor differences from EcmaScript proper).

这篇关于服务器端客户端之间的兼容加密库（Javascript - > C＃或Java）的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！