Re: [ADVANCED-DOTNET] Key storage.

2008-03-20 Thread Steve Johnson
On Thu, Mar 20, 2008 at 2:25 PM, Robert Lee <[EMAIL PROTECTED]> wrote: > > Thanks for the suggestion. I have a routine that creates a key from a > password, using SHA512. The problem is distributing the password, or the > key. > Right. If you go with the derived key approach, you must derive the

Re: [ADVANCED-DOTNET] Key storage.

2008-03-20 Thread Pardee, Roy
If you're at all concerned about a dictionary attack I think you're going to want to add a "salt" to that hash. Do I take it that the clients will also need to *decrypt* these secret values? If so, I think you're going to have a hard time keeping the decryption key from people with reflector (whi

Re: [ADVANCED-DOTNET] Key storage.

2008-03-20 Thread James Geall
Would generating a random key be an option if you have a password protected backup/export? I guess the thing that will influence this most is that it really depends on when you encrypt the data in the xml file, if it as at install time this might work. it might look a little like this: 1) genera

Re: [ADVANCED-DOTNET] Remoting, Threading and Concurrency

2008-03-20 Thread Stoyan Damov
Surely you want SingleCall, not Singleton. Couple of questions: Q1: How many machines you're using for the test (I guess 1 for test client and 1 for server)? If 1, then not sure what you're testing but maybe Q2 needs an answer. Q2. What's your machine like and particularly how many CPUs? Hint: i

Re: [ADVANCED-DOTNET] Key storage.

2008-03-20 Thread Robert Lee
Steve, Thanks for the suggestion. I have a routine that creates a key from a password, using SHA512. The problem is distributing the password, or the key. I will look into encrypting the key into a file here before release, and then distributing the key file, and certificate, but I'm not sure how

Re: [ADVANCED-DOTNET] Key storage.

2008-03-20 Thread Robert Lee
Thanks Adwait, I'll look into that more. -Original Message- From: Discussion of advanced .NET topics. [mailto:[EMAIL PROTECTED] On Behalf Of Adwait Ullal Sent: Thursday, March 20, 2008 3:40 PM To: ADVANCED-DOTNET@DISCUSS.DEVELOP.COM Subject: Re: [ADVANCED-DOTNET] Key storage. Rob, Perhap

Re: [ADVANCED-DOTNET] Remoting, Threading and Concurrency

2008-03-20 Thread Jeremy Byron
Apparently I'm not the only one having this problem. And MS says it's "by design": http://groups.google.com/group/microsoft.public.dotnet.framework.remotin g/browse_frm/thread/a79df9caf94ff437/ -Original Message- From: Discussion of advanced .NET topics. [mailto:[EMAIL PROTECTED] On Be

Re: [ADVANCED-DOTNET] Key storage.

2008-03-20 Thread Steve Johnson
I would suggest you either derive the key from a strong password or encrypt the key using a certificate. -- Steve Johnson On Thu, Mar 20, 2008 at 1:27 PM, Robert Lee <[EMAIL PROTECTED]> wrote: > Maybe someone can help shed some light on this subject for me. > > > > I am encrypting several value

Re: [ADVANCED-DOTNET] Key storage.

2008-03-20 Thread Adwait Ullal
Rob, Perhaps you can use a tool like aspnet_setreg or an equivalent to store the key in the registry during install? - Adwait -- Adwait Ullal w: http://www.adwait.com p: (408) 898-2581 On 3/20/08, Robert Lee <[EMAIL PROTECTED]> wrote: > > Maybe someone can help shed some light on this subject

[ADVANCED-DOTNET] Key storage.

2008-03-20 Thread Robert Lee
Maybe someone can help shed some light on this subject for me. I am encrypting several values (using AES) before storing them to an xml file, and I have yet to find an example, or explanation of how to get my key into protected storage the first time. The examples I've seen so far create a rand

Re: [ADVANCED-DOTNET] Remoting, Threading and Concurrency

2008-03-20 Thread Jeremy Byron
I've also tried hosting the object in IIS and in a WinForms app. Same result in both cases. Jeremy -Original Message- From: Discussion of advanced .NET topics. [mailto:[EMAIL PROTECTED] On Behalf Of Wilson, Phil Sent: Thursday, March 20, 2008 1:43 PM To: ADVANCED-DOTNET@DISCUSS.DEVELOP

Re: [ADVANCED-DOTNET] Remoting, Threading and Concurrency

2008-03-20 Thread Wilson, Phil
Is this something to do with the server being a console app? I have a nagging feeling that they are single-threaded somewhere. Phil Wilson -Original Message- From: Discussion of advanced .NET topics. [mailto:[EMAIL PROTECTED] On Behalf Of Jeremy Byron Sent: Thursday, March 20, 2008 7:4

Re: [ADVANCED-DOTNET] Remoting, Threading and Concurrency

2008-03-20 Thread Jeremy Byron
Hi, Each button-worker-threads uses the following line to get the proxy: retObj = (T)Activator.GetObject(type, "tcp://" + serverName + ":" + port.ToString() + "/" + objUri); They are not using a single instance or anything. Regards, Jeremy -Original Message- From: Disc

Re: [ADVANCED-DOTNET] Remoting, Threading and Concurrency

2008-03-20 Thread Richard Blewett
Are the calls using the same proxy or do they both spin up their own proxy Regards Richard Blewett - DevelopMentor http://www.dotnetconsult.co.uk/weblog2 > -Original Message- > From: Discussion of advanced .NET topics. [mailto:ADVANCED- > [EMAIL PROTECTED] On Behalf Of Jeremy Byron > Se

[ADVANCED-DOTNET] Remoting, Threading and Concurrency

2008-03-20 Thread Jeremy Byron
Hello everyone, I have been struggling with this for a few weeks now. I have searched on the web high and low, purchased "advanced" remoting books, searched newsgroups and these discussion group's archives. I see hints of explanations/solutions, but nothing that seems to work or explain what is