capicom and .net components under System.Security.CryptoGrahpy. -- dotnet security

montaque
8/8/2005 12:00:00 AM

seems that both provide similar encryption methods, i.e DES£¬RC2,TripleDes

my question is that why every .net encryption class has a initial vector,and
capicom does not need this parameter.

also, data encrypted by capicom cannot decrpyted by .net component under
system.security.cryptography.

basically, security class in .net is a wrapper of capiapi and capicom, so
why they acts differently, any ideas?

Michel Gallant
8/8/2005 9:14:01 AM

If you are referring to CAPICOM EncryptedData, that is a nonstandard
ASN.1 format, using Microsoft-specifie OIDS. Therefore it is only
really intended to be used with CAPICOM.
However, here is a detailed description of that format (that I managed
to decipher :-) :
http://www.jensign.com/JavaScience/dotnet/DeriveBytes

- Mitch Gallant
MVP Security

[quoted text, click to view]

dotnet security : capicom and .net components under System.Security.CryptoGrahpy.