Yesterday My friend the headquarter do Security Review over my sites .When he saw many of the connection strings were not be encrypted, he blamed me .So ,today ,I shared the string encryption and decryption process used with us to help those who need it .The encryption is to use 3DES and the key is to use MD5 Hash。The strength should meet the common require. Besides, the code is few and very useful.
using System;
using System.Collections.Generic;
using System.Text;
using System.Security.Cryptography;
namespace NOP.Security
{
public class Encrypt
{
public static string DecryptString(string strText, string key)
{
byte[] buffer = new MD5CryptoServiceProvider().ComputeHash(Encoding.ASCII.GetBytes(key));
TripleDESCryptoServiceProvider provider = new TripleDESCryptoServiceProvider();
provider.Key = buffer;
provider.Mode = CipherMode.ECB;
byte[] inputBuffer = Convert.FromBase64String(strText);
return Encoding.ASCII.GetString(provider.CreateDecryptor().TransformFinalBlock(inputBuffer, 0, inputBuffer.Length));
}
public static string DecryptUTF8String(string strText, string key)
{
byte[] buffer = new MD5CryptoServiceProvider().ComputeHash(Encoding.UTF8.GetBytes(key));
TripleDESCryptoServiceProvider provider = new TripleDESCryptoServiceProvider();
provider.Key = buffer;
provider.Mode = CipherMode.ECB;
byte[] inputBuffer = Convert.FromBase64String(strText);
return Encoding.UTF8.GetString(provider.CreateDecryptor().TransformFinalBlock(inputBuffer, 0, inputBuffer.Length));
}
public static string EncryptString(string strText, string key)
{
byte[] buffer = new MD5CryptoServiceProvider().ComputeHash(Encoding.ASCII.GetBytes(key));
TripleDESCryptoServiceProvider provider = new TripleDESCryptoServiceProvider();
provider.Key = buffer;
provider.Mode = CipherMode.ECB;
byte[] bytes = Encoding.ASCII.GetBytes(strText);
string str = Convert.ToBase64String(provider.CreateEncryptor().TransformFinalBlock(bytes, 0, bytes.Length));
provider = null;
return str;
}
public static string EncryptUTF8String(string strText, string key)
{
byte[] buffer = new MD5CryptoServiceProvider().ComputeHash(Encoding.UTF8.GetBytes(key));
TripleDESCryptoServiceProvider provider = new TripleDESCryptoServiceProvider();
provider.Key = buffer;
provider.Mode = CipherMode.ECB;
byte[] bytes = Encoding.UTF8.GetBytes(strText);
string str = Convert.ToBase64String(provider.CreateEncryptor().TransformFinalBlock(bytes, 0, bytes.Length));
provider = null;
return str;
}
}
}
This is from http://space.itpub.net/12639172/viewspace-617465