search

dlwyatt / ProtectedData

PowerShell Module for securely encrypting and sharing secret data such as passwords.
Apache License 2.0
77 stars 16 forks source link

Add support for CNG certificates #4

Closed dlwyatt closed 9 years ago

dlwyatt commented 10 years ago

Right now, the code relies on the .NET Framework's Cryptography classes for everything, and support for CNG (crypto next generation) in the base .NET framework is pretty much non-existent. Even RSA certificates which use a CNG key storage provider are unusable by the module in its current form.

The underlying CryptoAPI supports CNG, though, or I can look into other libraries (perhaps BouncyCastle.)

dlwyatt commented 9 years ago

Limited CNG support added in v1.1.1. The module still only allows for the use of RSA certificates, but it can now make use of RSA certificates that leverage a CNG key storage provider.

Still need to investigate whether there are other CNG asymmetric or key exchange algorithms worth supporting for this module.

dlwyatt commented 9 years ago

Added ECDH support in v1.2.