C / C++ / MFC

jkirkerx wrote:

You code sample is what I was looking for.

jkirkerx wrote:

Can I replace LPCBYTE with BYTE*

jkirkerx wrote:

I added odbcss.h, but it adds a bunch of sql server stuff that I don't need.

jkirkerx wrote:

Would Password be my KEY_192 with 24 bytes?

So I can add my IV_192 using CreateKeyParam?

BYTE	KEY_192[24]	= {42, 16, 93, 156, 78, 4, ...
BYTE	IV_192[24]	= {55, 103, 246, 79, 36, ...

CryptAcquireContext(&hProv, NULL, MS_STRONG_PROV, PROV_RSA_FULL, 0);
CryptCreateHash(hProv, CALG_MD5, 0, 0, &hHash);
CryptHashData(hHash, KEY_192, pwlen would be 24, 0);
CryptDeriveKey(hProv, CALG_3DES, hHash, 0, &hKey);
CryptSetKeyParam(hKey, KP_IV, IV_192, 0);

jkirkerx wrote:

Your example is very similar to what I wrote the 4th time, except you had the Base64 piece that I needed.

jkirkerx wrote:

Side question, How do get the length of a BYTE* for pwlen

CryptHashData(hHash, KEY_192, sizeof(KEY_192), 0);

WCHAR*	CA_Encryption::_encrypt_DES( WCHAR *pzInput )
{
	BOOL			bResult = FALSE;
	WCHAR			*szOutput = NULL;

	DWORD cbKey64	= sizeof(KEY_64);
	HCRYPTPROV		hProv;
	HCRYPTHASH		hHash = NULL;
	HCRYPTKEY		hKey = NULL;

	const int		DES_SIZE = 64;
	static BYTE		hash[DES_SIZE];
	DWORD			buffer_size = sizeof(hash);
	DWORD			buffer_length;		

	// Get the size of the conversion
	int iChar = WideCharToMultiByte(CP_UTF8, 0, pzInput, -1, NULL, 0, NULL, NULL);	
	char *szInput = new char[iChar];
	WideCharToMultiByte(CP_UTF8, 0, pzInput, -1, szInput, iChar, NULL, NULL);
	
	// Aquire a handle the Encryption provider
	bResult = CryptAcquireContextW( &hProv, 0, MS_STRONG_PROV, PROV_RSA_FULL, 0);
	bResult = CryptCreateHash(hProv, CALG_MD5, 0, 0, &hHash);
	bResult = CryptHashData(hHash, KEY_64, sizeof(KEY_64), 0);	
	bResult = CryptDeriveKey(hProv, CALG_DES, hHash, 0, &hKey);
	bResult = CryptSetKeyParam(hKey, KP_IV, IV_64, 0);

	// Get the size of the buffer
	buffer_length = strlen((char *)szInput);	
	BYTE *szBuffer = new BYTE[64];
	memcpy( szBuffer, (BYTE*)szInput, sizeof(szInput) );
	delete [] szInput;

	// Get the size of the hash and length
	bResult = CryptEncrypt(hKey, 0, FALSE, 0, szBuffer, &buffer_size, buffer_length);	
	
			
	CryptDestroyKey(hKey);
	CryptDestroyHash(hHash);
	CryptReleaseContext(hProv, 0);	
	
	return szOutput;
}

Public Shared Function Encrypt(ByVal value As String) As String
        If value <> "" Then
            Dim cryptoProvider As DESCryptoServiceProvider = New DESCryptoServiceProvider()
            Dim ms As MemoryStream = New MemoryStream()
            Dim cs As CryptoStream = New CryptoStream(ms, cryptoProvider.CreateEncryptor(KEY_64, IV_64), _
            CryptoStreamMode.Write)
            Dim sw As StreamWriter = New StreamWriter(cs)

            sw.Write(value)
            sw.Flush()
            cs.FlushFinalBlock()
            ms.Flush()

            'convert back to a string
            Return Convert.ToBase64String(ms.GetBuffer(), 0, ms.Length)
        Else
            Encrypt = ""
        End If

    End Function

jkirkerx wrote:

I get a value back that's sort or weird. It works, but I think the size of my buffer is too large.

 

R㏾΂ò.¢Ó`Ï­<oÝV|63¾ˆWãÔZ÷(šœ(è~Ó¥¶ãòõ¬"oÌtðaÏMûÏþƒÝÌXðýýýý««««««««îþîþîþîþîþîþ

szBuffer[buffer_size] = 0;

jkirkerx wrote:

I'm trying to get a perfect match on my encryption program, so it matches my asp.net version. It looks like the code you approved actually works correctly, and I'm down to the Base64 part.

jkirkerx wrote:

Is there a difference between your Base64Encode function and the function on this page?

http://msdn.microsoft.com/en-us/library/dhx0d524.aspx[^]

TCHAR pByteLF = *(LPWORD)(lpszBase64 + dwResult -1);
TCHAR pByteCR = *(LPWORD)(lpszBase64 + dwResult -2);
if(pByteCR == 0x0D && pByteLF == 0x0A)
{
	*(LPWORD)(lpszBase64 + dwResult -2) = 0;
}

if(TRUE == bStripCRLF)
{
	TCHAR pByteLF = *(LPWORD)(lpszBase64 + dwResult -1);
	TCHAR pByteCR = *(LPWORD)(lpszBase64 + dwResult -2);
	if(pByteCR == 0x0D && pByteLF == 0x0A)
	{
		*(LPWORD)(lpszBase64 + dwResult -2) = 0;
	}
}