I wanted to write a blog entry about LASS and LAP, but almost everything I could say has already been said by Marcus on his blog entries here . One thing I can add is taking the Q and A that appears in the comments. Here is some Q and A in no particular order. What is master key encryption...

Great news the installer code I've been describing on my blog is now available at codeplex . Please note, codeplex is very new, and still has some issues. I also expect to publish the lsp_helper library on which the Windows Mobile LSPs are based. [Author: Igor Dvorkin]

I've seen a lot of non-optimal code to import a session key into CAPI. The attached code provides a utility function to do the import. Note: KeySize depends on the algorithm of the session key.

I've spent the last few days looking at LSPs and have found some errors in the sample. These are: 1. Passing the wrong WSAPROTOCOLINFO to the next person in the chain: Symptom: WSPSocket fails when layered over another LSP. Fix: DCATALOG::FindNextProviderInChain needs to...

As discussed in my previous post, the autobind_lsp performs hard binding. This will cause issues for LSPs that need to connect to localhost. About hard binding: Hard binding is a per socket TCP options specified by: WSAIoctl(..., SIO_UCAST_IF,..). Once a socket is...

The following description of the autobind_lsp is copied from http://www.intrinsyc.com/whitepapers/RIL_whitepaper_MS_Intrinsyc_June2004.pdf" When an application makes a Connection Manager connection request, Connection Manager determines which IP interface the application should use to reach the destination...

In WM 5.0 2 new LSPs are present by default, the dtpt_lsp and the autobind_lsp. This article will discuss the dtpt_lsp and the next article will talk about the autobind_lsp. Desktop Passthrough (DTPT) is the technology that allows the CE device to talk on the desktop network while Active Sync is running...

Often clients start before servers, and need to be signaled when the service is ready. In this post we'll find a good solution to this problem. Approach #1: Server signals a named event, clients waits for the event. Server: //Create manual reset event for...

The Local Authentication SubSystem (LASS) is a new feature in Windows Mobile 5.0. This feature is available for both PPC and SP. Using LASS, applications can force users to authenticate. The most interesting LASS API is VerifyUser. To play with LASS set up a password and then try the following code...

Starting with Window Mobile 5 the SCRM is included in the default configuration. This means when you purchase a smartcard reader for WM 2005 you will be able to access it using the SCard APIs that are exported from winscard.lib. The SCRM on Windows Mobile is API compatible with the desktop version...

The Problems: P1) There is no way to determine the order in which LSPs will be installed in CE 4.2 P2) The SSLLSP always installs itself over the base provider, and will ignore chains placed by other LSPs. A work around requires the following two attributes: W1) Allows 3rd party LSPs to install in arbitrary...

As you have likely realized SignFile needs a key container with a private key to sign your file. You can read more about key containers and keys here : Often you'll generate the private/public key pair with makecert. You’ll then use the keys makecert generated when calling signfile. But, what if you...

[Last Edited on 12/7/2004] The target audience for this post is LSP developers who are looking to install their LSP. Developers with experience with desktop LSP installation will also find this very useful. This post also explains LSP installation differences between CE and XP, and explains how to install...

One of the difficulties I have supporting the LSP developer community is the amount of time between me implementing a change, and having LSP developers become aware of it. Often, the time delta is such that I can't incorporate developer feedback till the next version of CE. To help mitigate this issue...

My name is Igor Dvorkin. I've been with Window CE since 2002. I spend my time working on security and networking. Some of my interests on the security side are smartcards, local authentication, cryptography and penetration testing. On the networking side, I spend my time working with Layered Service...