search

Sustainsys / Saml2

Saml2 Authentication services for ASP.NET
Other
961 stars 604 forks source link

Adding fips compliance changes to Sustainsys library #1236

Closed aberro3s closed 2 years ago

aberro3s commented 4 years ago

-Changed CryptographicExtensions class to use AesCryptoServiceProvider instance for FIPS valid algorithm. -Changed and override decrypt methods from .Net on RSAEncryptedXML class for creating fips algorithm valid instances, avoid using CreateFromName method. -Added Test methods for RSAEncryptedXML class and CryptographicExtensions as well as a helper class for test initialization.

AndersAbel commented 2 years ago

Please have a look at the new signature validation code that's part of the Metadata library in develop. I think that when it uses the certificates non-touched, it should be possible to run on a FIPS-compliant platform.