DPAPI and Triple DES: A powerful combination to secure connection strings and other application settings

Hannes Foulds

Rate me:

4.77/5 (47 votes)

26 Aug 20056 min read

133.3K

1.7K

This article shows how DPAPI and Triple DES can be used to encrypt connection strings and other sensitive strings for storage in the ASP.NET web.config file.

dpapi_src.zip
- dpapi_src
  - Foulds.Security.UserInterface.DataProtection
    - App.ico
    - AssemblyInfo.cs
    - bin
    - DataProtection.cs
    - DataProtection.resx
    - Foulds.Security.UserInterface.DataProtection.csproj
    - Foulds.Security.UserInterface.DataProtection.csproj.user
  - Foulds.Security
    - AssemblyInfo.cs
    - bin
    - deploy.cmd
    - Deploy.wsf
    - Encryption
    - Foulds.Security.csproj
    - Foulds.Security.csproj.user
    - Foulds.Security.sln
    - Foulds.Security.snk
    - SectionHandlers
      - DataProtection
        
        ConfigSettings.cs
        
        EncryptedSettings.cs
        
        EncryptionEngine.cs
        
        SectionHandler.cs
dpapi_demo.zip
- dpapi_bin
  - Foulds.Security.dll
  - Foulds.Security.UserInterface.DataProtection.exe

Microsoft Visual Studio Solution File, Format Version 8.00
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Foulds.Security.UserInterface.DataProtection", "..\Foulds.Security.UserInterface.DataProtection\Foulds.Security.UserInterface.DataProtection.csproj", "{C6D2E823-22D6-421F-B336-FB9E85E3EFFE}"
	ProjectSection(ProjectDependencies) = postProject
	EndProjectSection
EndProject
Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Foulds.Security", "Foulds.Security.csproj", "{69C27B37-A7CF-43C7-9122-B31C6057C2EC}"
	ProjectSection(ProjectDependencies) = postProject
	EndProjectSection
EndProject
Global
	GlobalSection(SolutionConfiguration) = preSolution
		Debug = Debug
		Release = Release
	EndGlobalSection
	GlobalSection(ProjectConfiguration) = postSolution
		{C6D2E823-22D6-421F-B336-FB9E85E3EFFE}.Debug.ActiveCfg = Debug|.NET
		{C6D2E823-22D6-421F-B336-FB9E85E3EFFE}.Debug.Build.0 = Debug|.NET
		{C6D2E823-22D6-421F-B336-FB9E85E3EFFE}.Release.ActiveCfg = Release|.NET
		{C6D2E823-22D6-421F-B336-FB9E85E3EFFE}.Release.Build.0 = Release|.NET
		{69C27B37-A7CF-43C7-9122-B31C6057C2EC}.Debug.ActiveCfg = Debug|.NET
		{69C27B37-A7CF-43C7-9122-B31C6057C2EC}.Debug.Build.0 = Debug|.NET
		{69C27B37-A7CF-43C7-9122-B31C6057C2EC}.Release.ActiveCfg = Release|.NET
		{69C27B37-A7CF-43C7-9122-B31C6057C2EC}.Release.Build.0 = Release|.NET
	EndGlobalSection
	GlobalSection(ExtensibilityGlobals) = postSolution
	EndGlobalSection
	GlobalSection(ExtensibilityAddIns) = postSolution
	EndGlobalSection
EndGlobal

By viewing downloads associated with this article you agree to the Terms of Service and the article's licence.

If a file you wish to view isn't highlighted, and is a text file (not binary), please let us know and we'll add colourisation support for it.

License

This article has no explicit license attached to it but may contain usage terms in the article text or the download files themselves. If in doubt please contact the author via the discussion board below.

A list of licenses authors might use can be found here

Written By

Hannes Foulds

Web Developer

South Africa

Visit my blog at http://hannesfoulds.blogspot.com/

DPAPI and Triple DES: A powerful combination to secure connection strings and other application settings

License

Comments and Discussions