New Crypto Algorithms in Orcas

re: New Crypto Algorithms in Orcas

spandey — Fri, 12 Feb 2010 22:10:05 GMT

I have to convert existing crypto component to use AES256 for symmetric encryption decryption. I started looking at it and found two classes:

1. AESManaged under System.Security.Cryptography

2. AES256 class under Microsoft.Web.Services.Security.Cryptography that comes under WSE2.0 framework.

Please advise about why Microsoft has provided same set of classes under two different assemblies and which one to use in my .Net WCF Crypto Service.

Thanks

-Shaurav

New Security stuff in Orcas framework

Daniel Moth — Thu, 15 Mar 2007 02:49:03 GMT

New Security stuff in Orcas framework

re: New Crypto Algorithms in Orcas

shawnfa — Fri, 23 Feb 2007 20:23:06 GMT

Hi Aaron,

That's probably a better question to ask the ASP.NET guys. I'm not sure what work, if any, they've done to support operation in FIPS mode.

-Shawn

re: New Crypto Algorithms in Orcas

Aaron — Thu, 22 Feb 2007 22:25:50 GMT

How about the Asp.net 2.0 vs FIPS problem you commented on in https://blogs.msdn.com/shawnfa/archive/2005/05/16/417975.aspx

Is it currently possible to build an asp.net 2.0 with Require FIPS enabled on the server. I've tried the

machineKey validationKey="AutoGenerate,IsolateApps" decryptionKey="AutoGenerate,IsolateApps" validation="TripleDES" decryption="3DES"

fix listed in the KB and it doesn't work. This is a HUGE problem with government systems.

Aaron

re: New Crypto Algorithms in Orcas

shawnfa — Thu, 18 Jan 2007 23:12:39 GMT

Hi Levi,

Unfortunately, no :-(

System.Core.dll is part of the Orcas Green Bits. To support RSA-SHA256 we'd need to update mscorlib.dll, which is part of Orcas Red Bits. Unfortunately, we're not allowed to have red bits dependencies on green bits, so we could not make this change. However, we are now totally unblocked from allowing RSA-SHA256 in the next release of the framework.

(You might want to check out Soma's blog on green vs red bits here: http://blogs.msdn.com/somasegar/archive/2006/05/18/601354.aspx)

-Shawn

re: New Crypto Algorithms in Orcas

Levi — Thu, 18 Jan 2007 02:50:08 GMT

Does the addition of the SHA2 algorithms to the CNG mean that we'll finally be able to use RSA-SHA256? :)