Forum Moderators: open

Message Too Old, No Replies

Encrypted data in ASP

         

Hawkwood

3:06 pm on Apr 22, 2003 (gmt 0)

10+ Year Member



Hallo everyone.
For various reasons I have to generate a text file
containing sensitive data on the server and allow
logged users to download it.
Of course I thought about encrypting it... In perl
I would use something like Crypt::BlowFish or
Crypt::TripleDES together with Crypt::CBC. How
can I do that in ASP? Does anyone know of ready-made
code to do that?

Cheers,
Hawkwood

Xoc

3:23 pm on Apr 22, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



In .NET, there are crypto classes in the framework, both symmetric and public key. If you are looking for an excuse to check out .NET, this might be it. You do not have to move the entire site to .NET--.aspx and .asp pages can co-exist within the same site. You just need to the part of the site that downloads the file to be .NET.

For someone that is experienced in .NET this would be a couple of hour job.

Hawkwood

3:26 pm on Apr 22, 2003 (gmt 0)

10+ Year Member



Whoops, forgot to tell it, but I am limited to ASP 3.
Thanks anyway, Xoc.

duckhunter

2:47 am on Apr 23, 2003 (gmt 0)

10+ Year Member



Advanced encryption is really not available inside VBScript. To call the API Cryptography libraries you must be able to CreateContext which IUSR_account is not allowed to do. Not to mention classic ASP cannot make API calls directly.

We have written a DLL that is called from the ASP page. It must live in MTS as a library package and run under the system account or an account with rights to the registry. You could get Blowfish or something of the like too.