How to create password protected files thru C#

Hi,

I want to create a log file from my C# code. Currently I am encrypting
the contents of this log file, but now the requirement is that no one
should not be able to open this file from Windows Explorer. (Currently
if we open the file using some editor, the encrypted contents are
displayed)

The file should only be read/modified from within the program.

Is it possible to achieve this functionality in C#? Can i apply some
password to this file from within my program?

Any help in this regard is greatly appreciated.


Regards,
Ankit!!

re: How to create password protected files thru C#

Ankit,

Not really. You can't set permissions on a file on an application
basis. Users and groups have rights which are used to resolve access to the
file.

Now, you can encrypt the file, and then make it so only your app has
access to the encryption key (for decrypting the file).

You could also create a shell extension for explorer in an unmanaged
language (you shouldn't create them in .NET) which would prevent other
programs from opening the file (I think), but honestly, I think that is the
wrong approach.

--
- Nicholas Paldino [.NET/C# MVP]
- mvp@spam.guard.caspershouse.com

<aagarwal8@gmail.comwrote in message
news:77cf93a5-1bec-43ef-ada3-5b39b0b8d24c@s19g2000prg.googlegroups.com...

re: How to create password protected files thru C#

Another option is to move the file from the filing system into a database
clob field; the application can reverse the process (temporarily) when it
wants to access the file content.

re: How to create password protected files thru C#

If the contents of the log file are already encrypted, what is the purpose of
enforcing some policy that says nobody is allowed to load the file from the
filesystem? All they would ever see is encrypted characters. If you really
don't want people to even be able to "see" the file, then storing it in the
database as mentioned already would be a good choice. You can encrypta and
decrypt right from within SQL Server:

DECLARE @cleartext NVARCHAR(100)
DECLARE @encryptedstuff NVARCHAR(100)
DECLARE @decryptedstuff NVARCHAR(100)
SET @cleartext = 'This is text that needs to be encrypted.'
SET @encryptedstuff = EncryptByPassPhrase('pigscanfly', @cleartext)
SELECT @encryptedstuff
SET @decryptedstuff = DecryptByPassphrase('pigscanfly', @encryptedstuff)
SELECT @decryptedstuff
-- Peter
Site: http://www.eggheadcafe.com
UnBlog: http://petesbloggerama.blogspot.com
MetaFinder: http://www.blogmetafinder.com


"aagarwal8@gmail.com" wrote:

re: How to create password protected files thru C#

If the contents of the log file are already encrypted, what is the purposeBecause for highly sensitive information in particular, it's a security
breach just to let someone know it's even there.

re: How to create password protected files thru C#

On Tue, 11 Dec 2007 06:50:32 -0800 (PST), aagarwal8@gmail.com wrote:
As an alternative you could consider steganography. Disguise the
encrypted file inside another file, say a .jpg file. When the .jpg
file is opened in Explorer the user just gets the JPG image. When
your application opens a JPG file it knows to look for the hidden
file, extract it and decrypt it.

That might meet your needs. The other users see a file, but not the
file that you want to conceal.

rossum

re: How to create password protected files thru C#

From: Larry Smith [mailto:no_spam@_nospam.com]securityIn that case, they would still be able to know it is still there if they
are only able to not open it, as the OP requested.

However, I would tend to agree with you on the reasoning, it just
doesn't agree with the OP.

re: How to create password protected files thru C#

Hi,

You cannot simply say password protect a file whenever you open it in
notepad. That isn't possible. If you want to password protect a file, you
would need to embed a password within the file. For instance...

MyFile RunSecureFileManager -EnterPassword or
GeneratePublicPrivateKey -GenerateSecureFile - SecuredMyFile

You would have to figure out a proper encryption algorithm to use (there are
many outthere). What you could do is private, public keys and include the
public key within the file while encrypting the data, and decrypt it with
the private key within your program.

That is the only way I could think of doing this.

Good Luck!

--
Regards,
Mohamed Mansour
Microsoft Student Partner

"rossum" <rossum48@coldmail.comwrote in message
news:af8ul31een48bhb2rec04fame6kakntkta@4ax.com...