|
I need a user/password pair to connect to a RDBMS through my application.
Now I want to store those informations in a secure manner and I have thought to store them inside an encrypted archive using a strong encryption algorithm (may be AES, for example).
Now, what is the smartest way to store the encyption key needed to access the user/password pair ?
Inside the application binary ? In which secure way ?
Into another kind of container ?
Thanks
|
|
|
|
|
One solution from a question I posted last year[^]
CleaKO
"I think you'll be okay here, they have a thin candy shell. 'Surprised you didn't know that." - Tommy Boy
"Fill it up again! Fill it up again! Once it hits your lips, it's so good!" - Frank the Tank (Old School)
|
|
|
|
|
It's the same solution I have thought, in some way.
And now I'm reading some articles about DPAPI to see if it can help me for this kind of problems.
Thanks a lot
|
|
|
|
|
If you have .NET 2.0 it can do the encryption/decryption for you as well as store it in the registry I believe.
CleaKO
"I think you'll be okay here, they have a thin candy shell. 'Surprised you didn't know that." - Tommy Boy
"Fill it up again! Fill it up again! Once it hits your lips, it's so good!" - Frank the Tank (Old School)
|
|
|
|
|
I'm using VC++ without managed code.
However it seems that DPAPI could solve this problem, either using a machine-store or a user store.
For the latter, a point is not clear for me:
for user-store it seems DPAPI use the windows user logon credentials to generate the master and session keys. The CryptProtectData and CryptUnprotectData functions have the chance to show a dialog to allow the user to insert a password. Is this only necessary if the windows user has no password set (may be a standalone machine) ?
|
|
|
|
|
I'm designing a software and trying to use the patterns. how can use a pattern for designing a module that manage the system settings?
mehdi
|
|
|
|
|
you could use a singleton pattern to hold the class that holds your settings.
|
|
|
|
|
Maximilien wrote: you could use a singleton pattern to hold the class that holds your settings.
All your settings are all belong to us 
led mike
|
|
|
|
|
The best way to approach this is simple XML.
You can implement your own Settings class by Opening an XML document, defining methods using XPath Queries and setting node values.
Or you can use the Settings Class that is already built into .NET.
The settings class built into .NET will hold global application settings and individual user settings. These settings are stored in different locations of a Windows operating system, to allow for multiple user computers and roaming profiles.
Hope this helps!
~ CodeDoctor ~
|
|
|
|
|
My company is using SQL Server 2000 for our OLTP DBs and I have been writing reports using SSRS. The time has come for us to start a datawarehouse because of the amount of processing some of these reports entail. I have done research online about OLAP design and concepts, but I would really like recommendation of a good book that is full of case studies, design examples, etc. Many thanks.
|
|
|
|
|
|
This book is great. Thanks.
|
|
|
|
|
i want to know about the tcp flow in network simulator so that i could make changes in desired place.
One more thing after change in code of network simulator each time we have to configure it then install it or there's some other way out.
please reply me soon...
Please reply me soon.......n u can ask me any questions in c/c++/.net
|
|
|
|
|
According to the front end field right now it's too short.It shows just Name and Addres (example) if we like to add up more details of the front end.How should we design the programe? We need some help on this point. Thank you in advances.
|
|
|
|
|
|
I would like to design database and coding program example the right now the screen customer have field Name and Address (textbox for entry) but right now user request field Phone. I would like to add up field by user (user have back end screen (screen for setting) him can create field "Phone" by i don't modify program).Thank you in advances.
|
|
|
|
|
I have idea. you can see http://www.zoho.com/crm press online demo press setup example header "Lead Einstellungen" press Felderliste. Right now you can add field by press "New custom field" .I would like to design and code program like that.Thank you.
|
|
|
|
|
You can architect an application to automatically create new database fields on the fly.
This will allow you to extend what you are storing in your application as the application grows.
What becomes difficult, is reporting against the fields you've added. Reports are usually a fairly straight forward thing, unless there are undetermined fields you need to report against.
Either way, if I understand your question, these approaches have been taken in many products, but require a seperate meta-data database to do a prelimary data build before running queries.
If you are looking to accomplish this because there is no design yet defined for your application. I strongly suggest that you put it down on paper before you try and put it together.
The reason why I believe that planning and architecting is so important is because if you ask anyone to go into a 40 story building, knowing that the builders didn't use blueprints to build it, instead, they just threw it together, the people you ask to go into that building will tell you NO.
Hope this helps!
~ CodeDoctor ~
|
|
|
|
|
Is Microsoft planning to upgrade the SiteMap object in .NET 2.0 to actually work or is the underlineing design intrinsically flawed? This is the question I asked myself repeatedly in the last few days and I think I finally was able to understand why the SiteMap object will never truely represent most site maps correctly. Before I explain the issue I wanted to know what others thought.
nothing
|
|
|
|
|
SiteMap works.
"Throughout human history, we have been dependent on machines to survive. Fate, it seems, is not without a sense of irony. " - Morpheus
|
|
|
|
|
The whole issue around SiteMaps, is that they are built using the Provider pattern. This means that you can "easily" implement your own SiteMap that drops in, as long as it follows the Site Map Provider pattern. MS never intended their implementation of SiteMaps as being the "be all and end all" of site maps.
the last thing I want to see is some pasty-faced geek with skin so pale that it's almost translucent trying to bump parts with a partner - John Simmons / outlaw programmer
Deja View - the feeling that you've seen this post before.
|
|
|
|
|
The fact that they used a provider pattern makes sense and I have no problem with that aspect. However, the idea that the component can only model Trees is a bit limited. Many sites typically have more complex connectivity then a tree is able to describe. Any resolution to this will always seem forced and cumbersome.
nothing
|
|
|
|
|
So This is what I found. The SiteMap is flawed because it assumes that every site can be modled as a Tree structure. Given a site that models a network topology and it crashes. I would guess most sites actually model a real network rather then a tree. The reason you can't model a network for a SiteMap is simple. Given any two nodes in the network you can not assume any one path will lead from node to node. Hence resolution of the path fails. Typically this causes the developer to try a variety of other approaches to resolve this ambiguity of path.
nothing
|
|
|
|
|
i am having one ppt in that header i placed a image but when i view the slide it is not
displaying .Please give solution for my problem.
Thanks to all repliers.
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
