Click here to Skip to main content
11,434,743 members (45,321 online)
Click here to Skip to main content

Emulating PBEWithMD5AndDES Encryption under .NET

, 19 Nov 2006 CPOL
Rate this:
Please Sign up or sign in to vote.
A class to provide the same behaviour as Java's PBEWithMD5AndDES encryption algorithm

Introduction

In most ways, .NET's encryption model is pretty good. But when migrating secure applications from Java, the lack of this built in password-based encryption (PBE) is a pain. This article introduces a class that will encrypt data in the same way as Java's PBEWithMD5AndDES algorithm.

The implementation of the algorithm I use is adapted from this article by Michel Gallant.

The Algorithm

As the name suggests, this encryption algorithm uses the DES mechanism with a key generated by MD5 hashing the 'password', combined with a salt string. It allows the input string to be repeatedly MD5-hashed a number of times. The 16-byte MD5 string is then split into two halves, an 8-byte DES key and an 8-byte initial seed for DES.

It obviously makes sense to make use of .NET's DESCryptoServiceProvider to provide the encryption. So this implementation is simply doing the multiple MD5 hash.

The Code

To use this class, simply use:

PKCSKeyProvider kp = new PKCSKeyProvider();
ICryptoTransform crypt = kp.Generate(
      "MyPassword",
      new byte[] { 100, 200, 255, 3},  // salt
      15,             // iterations of MD5 hashing
      1 );  // number of 16-byte segments to create. 
            // 1 to mimic Java behaviour.

Complete class listing:

using System;
using System.IO;
using System.Text;
using System.Security.Cryptography;

namespace RedCorona.Cryptography {
    public class PKCSKeyGenerator {
        byte[] key = new byte[8], iv = new byte[8];
        DESCryptoServiceProvider des = new DESCryptoServiceProvider();
        
        public byte[] Key { get { return key; } }
        public byte[] IV { get { return iv; } }
        public ICryptoTransform Encryptor { get { return des.CreateEncryptor(key, iv); } }
        
        public PKCSKeyGenerator(){}
        public PKCSKeyGenerator(String keystring, byte[] salt, 
		int md5iterations, int segments){
            Generate(keystring, salt, md5iterations, segments);
        }
        
        public ICryptoTransform Generate(String keystring, byte[] salt, 
		int md5iterations, int segments){
            int HASHLENGTH = 16;    //MD5 bytes
            byte[] keymaterial = 
	    new byte[HASHLENGTH*segments] ; //to store concatenated Mi hashed results
            
            // --- get secret password bytes ----
            byte[] psbytes;
            psbytes = Encoding.UTF8.GetBytes(keystring);
            
            // --- concatenate salt and pswd bytes into fixed data array ---
            byte[] data00 = new byte[psbytes.Length + salt.Length] ;
            Array.Copy(psbytes, data00, psbytes.Length);  //copy the pswd bytes
            Array.Copy(salt, 0, data00, 
		psbytes.Length, salt.Length) ;//concatenate the salt bytes
            
            // ---- do multi-hashing and concatenate results  D1, D2 ...  
            // into keymaterial bytes ----
            MD5 md5 = new MD5CryptoServiceProvider();
            byte[] result = null;
            byte[] hashtarget = new byte[HASHLENGTH + 
		data00.Length];   //fixed length initial hashtarget
            
            for(int j=0; j<segments; j++) {
                // ----  Now hash consecutively for md5iterations times ------
                if(j == 0) result = data00;       //initialize
                else {
                    Array.Copy(result, hashtarget, result.Length);
                    Array.Copy(data00, 0, hashtarget, result.Length, data00.Length) ;
                    result = hashtarget;
                }
                
                for(int i=0; i<md5iterations; i++)
                    result = md5.ComputeHash(result);
                
                Array.Copy(result, 0, keymaterial, j*HASHLENGTH, 
			result.Length);  //concatenate to keymaterial
            }
            
            Array.Copy(keymaterial, 0, key, 0, 8);
            Array.Copy(keymaterial, 8, iv, 0, 8);
            
            return Encryptor;
        }
    }
}

History

  • 19th November, 2006: Initial post

License

This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Share

About the Author

BobJanova

United Kingdom United Kingdom
I'm a recent graduate (MSci) from the University of Cambridge, no longer studying Geology. Programming is a hobby so I get to write all the cool things and not all the boring things Smile | :) . However I now have a job in which I have to do a bit of work with a computer too.

Comments and Discussions

 
GeneralError in IV property Pin
tHermO7825-Aug-08 3:43
membertHermO7825-Aug-08 3:43 
GeneralRe: Error in IV property Pin
BobJanova25-Aug-08 12:57
memberBobJanova25-Aug-08 12:57 
GeneralLicense Pin
Justin Porter17-Jul-08 10:45
memberJustin Porter17-Jul-08 10:45 
GeneralRe: License Pin
BobJanova17-Jul-08 12:01
memberBobJanova17-Jul-08 12:01 
GeneralRe: License Pin
Justin Porter18-Jul-08 10:12
memberJustin Porter18-Jul-08 10:12 
GeneralNice! Pin
Titanio18-Apr-07 3:32
memberTitanio18-Apr-07 3:32 
GeneralAdapting for PBEWithMD5AndTripleDES Pin
kyoseix14-Feb-07 9:28
memberkyoseix14-Feb-07 9:28 
QuestionRe: Adapting for PBEWithMD5AndTripleDES Pin
BobJanova14-Feb-07 9:50
memberBobJanova14-Feb-07 9:50 
QuestionUsing this in .net Pin
BlahMatt7-Feb-07 8:23
memberBlahMatt7-Feb-07 8:23 
AnswerRe: Using this in .net Pin
BobJanova7-Feb-07 8:40
memberBobJanova7-Feb-07 8:40 
GeneralRe: Using this in .net [modified] Pin
BlahMatt7-Feb-07 9:22
memberBlahMatt7-Feb-07 9:22 
GeneralRe: Using this in .net Pin
irfanhaleem@hotmail.com6-Jul-10 2:33
memberirfanhaleem@hotmail.com6-Jul-10 2:33 
GeneralRe: Using this in .net Pin
BobJanova6-Jul-10 2:43
memberBobJanova6-Jul-10 2:43 
QuestionDecryption? Pin
Audiedog29-Nov-06 10:49
memberAudiedog29-Nov-06 10:49 
AnswerRe: Decryption? Pin
BobJanova29-Nov-06 14:27
memberBobJanova29-Nov-06 14:27 
GeneralRe: Decryption? Pin
Audiedog30-Nov-06 7:06
memberAudiedog30-Nov-06 7:06 
GeneralRe: Decryption? Pin
ckl_887-Jan-07 0:32
memberckl_887-Jan-07 0:32 
GeneralRe: Decryption? Pin
ckl_887-Jan-07 16:02
memberckl_887-Jan-07 16:02 
GeneralRe: Decryption? Pin
cordobes13-Oct-08 6:27
membercordobes13-Oct-08 6:27 
GeneralRe: Decryption? Pin
mascix13-Nov-08 23:53
membermascix13-Nov-08 23:53 
GeneralRe: Decryption? Pin
jgonzalez7178-Jul-11 7:38
memberjgonzalez7178-Jul-11 7:38 
GeneralMD5 is obsolete Pin
Jan Seda20-Nov-06 1:30
memberJan Seda20-Nov-06 1:30 
GeneralRe: MD5 is obsolete Pin
BobJanova20-Nov-06 7:06
memberBobJanova20-Nov-06 7:06 
GeneralRe: MD5 is obsolete Pin
Jan Seda20-Nov-06 7:16
memberJan Seda20-Nov-06 7:16 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.

| Advertise | Privacy | Terms of Use | Mobile
Web01 | 2.8.150428.2 | Last Updated 19 Nov 2006
Article Copyright 2006 by BobJanova
Everything else Copyright © CodeProject, 1999-2015
Layout: fixed | fluid