Stable version 2.2.3 (Compatible with OutSystems 11)

Other versions available for 10 and Older

Uploaded

on 14 October 2024

4.7

(50 ratings)

Details

The Cryptographic tools to protect your data. Formerly known as ardoCrypto.

Feature List

Randomized authenticated encryption with strong (256-bit) keys

HMAC256 algorithm for unforgeable integrity checking

Function to correctly hash a password and compare it.

By popular demand, added a function to hash a string using standard message digest (SHA256 is default)

Encrypt, Decrypt using RSA (OAEP padding). Generation of RSA keys.

Main Benefits

Your encrypted data cannot be tampered with without you knowing about it.

People can't tell when you're encrypting the same plaintext with the same key (Chosen Plaintext Attack secure scheme)

See discussions for more information.

Release notes (2.2.3)

Security:

Updated BouncyCastle.Cryptography 2.2.1 to 2.4.0
Replaced obsolete usage of System.Security.Cryptography.RNGCryptoServiceProvider with System.Security.Cryptography.RandomNumberGenerator

License (2.2.3)

BSD-3 license (https://opensource.org/licenses/BSD-3-Clause)

Scrypt - Apache License 2.0 (https://github.com/viniciuschiele/Scrypt/blob/master/LICENSE)
BCrypt.Net - (https://github.com/BcryptNet/bcrypt.net/blob/main/licence.txt)

BouncyCastle - MIT Licence ( https://www.nuget.org/packages/BouncyCastle.Cryptography/2.2.1/License)

Reviews (17)

26 Sep (4 days ago)

in version 2.2.3

Good set of crypto actions (AES, RSA, hashing) without having to write my own extension. Used it for encrypting sensitive data before storing it and it's been stable. Just be aware you still need to understand what you're doing, especially around key management, the component won't make those decisions for you.

21 Jul

in version 2.2.3

This approach is not suitable, as the SHA256 hash generated using ComputeHash does not match the expected value returned by the CMD command, resulting in an incorrect hash comparison.