Title: Busy Busy
Slug: busy-busy
Date: 2006-04-15 12:05:00
Author: Kartones
Lang: en
Tags: Development, Security, .NET
Description: Some remarks about .NET security features, cryptography, and translating a .NET 1.1 version of Community Server Forums to Spanish.

 <p>It's been a while since last post, but I'm a bit tired and I need some
rest.</p>
<p>At work I'm working with .NET security features and cryptography and, altough
very very interesting, there's a lot to do in few weeks that remain until the
deadline. </p>
<p>I want to prepare a "Security special" post with lots of interesting links of
security related websites, blogs and articles, but until then, two basic ones
that have proven useful in the project:</p>
<ul><li><a href="http://www.bouncycastle.org/csharp/index.html">BouncyCastle.org</a>: What you get when you combine high level
security freaks with some programming skills? This website and the bbcrypto
library. Here's the list of current features (of the C# port, the original is
also available for Java):</li></ul>
<ul><li>Generation and parsing of PKCS12 files.
</li><li>Version 1 and Version 3 X.509 certificate generation.
</li><li>PBE algorithms supported by PBEUtil: PBEwithMD2andDES-CBC,
PBEwithMD2andRC2-CBC, PBEwithMD5andDES-CBC, PBEwithMD5andRC2-CBC,
PBEwithSHA1andDES-CBC, PBEwithSHA1andRC2-CBC, PBEwithSHA-1and128bitRC4,
PBEwithSHA-1and40bitRC4, PBEwithSHA-1and3-keyDESEDE-CBC,
PBEwithSHA-1and2-keyDESEDE-CBC, PBEwithSHA-1and128bitRC2-CBC,
PBEwithSHA-1and40bitRC2-CBC, PBEwithHmacSHA-1, PBEwithHmacSHA-224,
PBEwithHmacSHA-256, PBEwithHmacRIPEMD128, PBEwithHmacRIPEMD160, and
PBEwithHmacRIPEMD256.
</li><li>Signature algorithms supported by SignerUtil: MD2withRSA, MD4withRSA,
MD5withRSA, RIPEMD128withRSA, RIPEMD160withRSA, RIPEMD256withRSA, SHA-1withRSA,
SHA-224withRSA, SHA-256withRSAandMGF1, SHA-384withRSAandMGF1,
SHA-512withRSAandMGF1, SHA-1withDSA, and SHA-1withECDSA.
</li><li>Symmetric key algorithms: AES, CAST5, CAST6 DESede, DES, IDEA, RC2, RC4,
RC5-32, RC5-64, RC6, Rijndael, Serpent, Skipjack, Blowfish, and Twofish.
</li><li>Symmetric key modes: CBC, CFB, CTS, OFB, and SIC (or CTR).
</li><li>Symmetric key paddings: ISO10126d2, PKCS-5/7, TBC, X.923, and Zero Byte.
</li><li>Asymmetric key algorithms: RSA, ElGamal, DSA, ECDSA.
</li><li>Asymmetric key paddings/encodings: ISO9796d1, OAEP, and PKCS1.
</li><li>Digests: MD2, MD4, MD5, RIPEMD128, RIPEMD160, RIPEMD256, RIPEMD320, SHA-1,
SHA-224, SHA-256, SHA-384, SHA-512, and Tiger.
</li><li>Signer mechanisms: DSA, ECDSA, ISO9796d2, PSS, RSA with Digest.
</li><li>Key Agreement: Diffie-Hellman and EC-DH.
</li><li>Macs: CBCBlockCipher, CFBBlockCipher, HMac.
</li><li>PBE generators: PKCS-12, and PKCS 5 - schemes 1 and 2. </li></ul>
<ul><li><a href="http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpag2/html/SecurityHowTosIndex.asp">Microsoft Patterns &amp; Practices Security How-Tos</a>: No
explanation needed. A reference site for either .NET 1.1 or 2.0 framework
stuff.</li></ul>
<p>Apart from day-to-day work, I'm a bit away from coding, but I'm translating
to spanish and modifying an almost up to date .NET 1.1 version of Community Server Forums, for the Ultima Online free shard I play on.</p>
<p>It's not the latest version, but I'll post the language pack when I finish.
The forums are quite good, but there are some features I'll have to mess with
because I don't like them.</p>
<p>Soon I'll have to prepare another exam (after passing MCP 70-340, I only have left MCP 70-300 to become MCSD.NET at last) so I have to hurry up.</p>