Click here to Skip to main content
Click here to Skip to main content

Emulating PBEWithMD5AndDES Encryption under .NET

, 19 Nov 2006 CPOL
Rate this:
Please Sign up or sign in to vote.
A class to provide the same behaviour as Java's PBEWithMD5AndDES encryption algorithm

Introduction

In most ways, .NET's encryption model is pretty good. But when migrating secure applications from Java, the lack of this built in password-based encryption (PBE) is a pain. This article introduces a class that will encrypt data in the same way as Java's PBEWithMD5AndDES algorithm.

The implementation of the algorithm I use is adapted from this article by Michel Gallant.

The Algorithm

As the name suggests, this encryption algorithm uses the DES mechanism with a key generated by MD5 hashing the 'password', combined with a salt string. It allows the input string to be repeatedly MD5-hashed a number of times. The 16-byte MD5 string is then split into two halves, an 8-byte DES key and an 8-byte initial seed for DES.

It obviously makes sense to make use of .NET's DESCryptoServiceProvider to provide the encryption. So this implementation is simply doing the multiple MD5 hash.

The Code

To use this class, simply use:

PKCSKeyProvider kp = new PKCSKeyProvider();
ICryptoTransform crypt = kp.Generate(
      "MyPassword",
      new byte[] { 100, 200, 255, 3},  // salt
      15,             // iterations of MD5 hashing
      1 );  // number of 16-byte segments to create. 
            // 1 to mimic Java behaviour.

Complete class listing:

using System;
using System.IO;
using System.Text;
using System.Security.Cryptography;

namespace RedCorona.Cryptography {
    public class PKCSKeyGenerator {
        byte[] key = new byte[8], iv = new byte[8];
        DESCryptoServiceProvider des = new DESCryptoServiceProvider();
        
        public byte[] Key { get { return key; } }
        public byte[] IV { get { return iv; } }
        public ICryptoTransform Encryptor { get { return des.CreateEncryptor(key, iv); } }
        
        public PKCSKeyGenerator(){}
        public PKCSKeyGenerator(String keystring, byte[] salt, 
		int md5iterations, int segments){
            Generate(keystring, salt, md5iterations, segments);
        }
        
        public ICryptoTransform Generate(String keystring, byte[] salt, 
		int md5iterations, int segments){
            int HASHLENGTH = 16;    //MD5 bytes
            byte[] keymaterial = 
	    new byte[HASHLENGTH*segments] ; //to store concatenated Mi hashed results
            
            // --- get secret password bytes ----
            byte[] psbytes;
            psbytes = Encoding.UTF8.GetBytes(keystring);
            
            // --- concatenate salt and pswd bytes into fixed data array ---
            byte[] data00 = new byte[psbytes.Length + salt.Length] ;
            Array.Copy(psbytes, data00, psbytes.Length);  //copy the pswd bytes
            Array.Copy(salt, 0, data00, 
		psbytes.Length, salt.Length) ;//concatenate the salt bytes
            
            // ---- do multi-hashing and concatenate results  D1, D2 ...  
            // into keymaterial bytes ----
            MD5 md5 = new MD5CryptoServiceProvider();
            byte[] result = null;
            byte[] hashtarget = new byte[HASHLENGTH + 
		data00.Length];   //fixed length initial hashtarget
            
            for(int j=0; j<segments; j++) {
                // ----  Now hash consecutively for md5iterations times ------
                if(j == 0) result = data00;       //initialize
                else {
                    Array.Copy(result, hashtarget, result.Length);
                    Array.Copy(data00, 0, hashtarget, result.Length, data00.Length) ;
                    result = hashtarget;
                }
                
                for(int i=0; i<md5iterations; i++)
                    result = md5.ComputeHash(result);
                
                Array.Copy(result, 0, keymaterial, j*HASHLENGTH, 
			result.Length);  //concatenate to keymaterial
            }
            
            Array.Copy(keymaterial, 0, key, 0, 8);
            Array.Copy(keymaterial, 8, iv, 0, 8);
            
            return Encryptor;
        }
    }
}

History

  • 19th November, 2006: Initial post

License

This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Share

About the Author

BobJanova

United Kingdom United Kingdom
I'm a recent graduate (MSci) from the University of Cambridge, no longer studying Geology. Programming is a hobby so I get to write all the cool things and not all the boring things Smile | :) . However I now have a job in which I have to do a bit of work with a computer too.

Comments and Discussions

 
GeneralError in IV property PinmembertHermO7825-Aug-08 3:43 
GeneralRe: Error in IV property PinmemberBobJanova25-Aug-08 12:57 
GeneralLicense PinmemberJustin Porter17-Jul-08 10:45 
GeneralRe: License PinmemberBobJanova17-Jul-08 12:01 
GeneralRe: License PinmemberJustin Porter18-Jul-08 10:12 
GeneralNice! PinmemberTitanio18-Apr-07 3:32 
GeneralAdapting for PBEWithMD5AndTripleDES Pinmemberkyoseix14-Feb-07 9:28 
QuestionRe: Adapting for PBEWithMD5AndTripleDES PinmemberBobJanova14-Feb-07 9:50 
QuestionUsing this in .net PinmemberBlahMatt7-Feb-07 8:23 
AnswerRe: Using this in .net PinmemberBobJanova7-Feb-07 8:40 
GeneralRe: Using this in .net [modified] PinmemberBlahMatt7-Feb-07 9:22 
GeneralRe: Using this in .net Pinmemberirfanhaleem@hotmail.com6-Jul-10 2:33 
GeneralRe: Using this in .net PinmemberBobJanova6-Jul-10 2:43 
QuestionDecryption? PinmemberAudiedog29-Nov-06 10:49 
AnswerRe: Decryption? PinmemberBobJanova29-Nov-06 14:27 
GeneralRe: Decryption? PinmemberAudiedog30-Nov-06 7:06 
GeneralRe: Decryption? Pinmemberckl_887-Jan-07 0:32 
GeneralRe: Decryption? Pinmemberckl_887-Jan-07 16:02 
GeneralRe: Decryption? Pinmembercordobes13-Oct-08 6:27 
GeneralRe: Decryption? Pinmembermascix13-Nov-08 23:53 
GeneralRe: Decryption? Pinmemberjgonzalez7178-Jul-11 7:38 
GeneralMD5 is obsolete PinmemberJan Seda20-Nov-06 1:30 
GeneralRe: MD5 is obsolete PinmemberBobJanova20-Nov-06 7:06 
GeneralRe: MD5 is obsolete PinmemberJan Seda20-Nov-06 7:16 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.

| Advertise | Privacy | Terms of Use | Mobile
Web01 | 2.8.1411023.1 | Last Updated 19 Nov 2006
Article Copyright 2006 by BobJanova
Everything else Copyright © CodeProject, 1999-2014
Layout: fixed | fluid