encrypt password in config file

[CLEAR-RCIC]

Hello All:

I want to encrypt a username/password inside a config file that will be read
and decrypted by a .dll. I have discovered many ways to do this looking at
Google but was wondering if anyone could recomend one method over another.
Any thoughts?

[Rakesh Rajan]

Hi,

DPAPI might be a good idea.

MSDN lists different options available in the section hosting the DPAPI How
To:
http://msdn.microsoft.com/library/de...SecNetHT07.asp

--
HTH,
Rakesh Rajan
MVP, MCSD
http://www.msmvps.com/rakeshrajan/

"CLEAR-RCIC" wrote:

Hello All:

I want to encrypt a username/password inside a config file that will be read
and decrypted by a .dll. I have discovered many ways to do this looking at
Google but was wondering if anyone could recomend one method over another.
Any thoughts?

[CLEAR-RCIC]

Thanks. I'll try it.

"CLEAR-RCIC" wrote:

Hello All:

I want to encrypt a username/password inside a config file that will be read
and decrypted by a .dll. I have discovered many ways to do this looking at
Google but was wondering if anyone could recomend one method over another.
Any thoughts?

[rossum]

On Wed, 8 Jun 2005 11:05:01 -0700, "CLEAR-RCIC"
<CL*******@discussions.microsoft.com> wrote:

Hello All:

I want to encrypt a username/password inside a config file that will be read
and decrypted by a .dll. I have discovered many ways to do this looking at
Google but was wondering if anyone could recomend one method over another.
Any thoughts?

No actual need to decrypt. If you encrypt the password that the user
enters then you just have to check that the two encrypted versions
match. Depending on how secure you want things to be you could even
use a one-way encryption that cannot be decoded.

rossum

The ultimate truth is that there is no ultimate truth

[CLEAR-RCIC]

Alright. Thanks for the clarification.

"rossum" wrote:

On Wed, 8 Jun 2005 11:05:01 -0700, "CLEAR-RCIC"
<CL*******@discussions.microsoft.com> wrote:

Hello All:

I want to encrypt a username/password inside a config file that will be read
and decrypted by a .dll. I have discovered many ways to do this looking at
Google but was wondering if anyone could recomend one method over another.
Any thoughts?

No actual need to decrypt. If you encrypt the password that the user
enters then you just have to check that the two encrypted versions
match. Depending on how secure you want things to be you could even
use a one-way encryption that cannot be decoded.

rossum

The ultimate truth is that there is no ultimate truth