Comment puis-je utiliser ConvertTo-SecureString

Je sais que c'est un vieux post. Je suis l'affichage de cette exhaustivité et de la postérité, parce que je ne pouvais pas trouver une réponse complète sur MSDN ou stackoverflow. Il sera ici dans le cas où j'ai besoin de le faire de nouveau.

C'est un C# de mise en œuvre de powershell est ConvertTo-SecureString avec le cryptage AES (activé à l'aide de la touche option). Je laisse pour l'exercice de code C# de mise en œuvre de ConvertFrom-SecureString.

# forward direction
[securestring] $someSecureString = read-host -assecurestring
[string] $psProtectedString = ConvertFrom-SecureString -key (1..16) -SecureString $someSecureString
# reverse direction
$back = ConvertTo-SecureString -string $psProtectedString -key (1..16)

Mon travail est de combiner les réponses et la réorganisation de user2748365, la réponse à être plus lisible et en ajoutant des éducation des commentaires! J'ai aussi résolu le problème avec la prise d'une sous-chaîne (au moment de ce post, son code n'a que deux éléments dans strArray.

using System.IO;
using System.Text;
using System.Runtime.InteropServices;
using System.Security;
using System.Security.Cryptography;
using System.Globalization;
//psProtectedString - this is the output from
//  powershell> $psProtectedString = ConvertFrom-SecureString -SecureString $aSecureString -key (1..16)
//key - make sure you add size checking 
//notes: this will throw an cryptographic invalid padding exception if it cannot decrypt correctly (wrong key)
public static SecureString ConvertToSecureString(string psProtectedString, byte[] key)
{
//'|' is indeed the separater
byte[] asBytes = Convert.FromBase64String( psProtectedString );
string[] strArray = Encoding.Unicode.GetString(asBytes).Split(new[] { '|' });
if (strArray.Length != 3) throw new InvalidDataException("input had incorrect format");
//strArray[0] is a static/magic header or signature (different passwords produce
//   the same header)  It unused in our case, looks like 16 bytes as hex-string
//you know strArray[1] is a base64 string by the '=' at the end
//   the IV is shorter than the body, and you can verify that it is the IV, 
//   because it is exactly 16bytes=128bits and it decrypts the password correctly
//you know strArray[2] is a hex-string because it is [0-9a-f]
byte[] magicHeader = HexStringToByteArray(encrypted.Substring(0, 32));
byte[] rgbIV = Convert.FromBase64String(strArray[1]);
byte[] cipherBytes = HexStringToByteArray(strArray[2]);
//setup the decrypter
SecureString str = new SecureString();
SymmetricAlgorithm algorithm = SymmetricAlgorithm.Create();
ICryptoTransform transform = algorithm.CreateDecryptor(key, rgbIV);
using (var stream = new CryptoStream(new MemoryStream(cipherBytes), transform, CryptoStreamMode.Read))
{
//using this silly loop format to loop one char at a time
//so we never store the entire password naked in memory
int numRed = 0;
byte[] buffer = new byte[2]; //two bytes per unicode char
while( (numRed = stream.Read(buffer, 0, buffer.Length)) > 0 )
{
str.AppendChar(Encoding.Unicode.GetString(buffer).ToCharArray()[0]);
}
}
//
//non-production code
//recover the SecureString; just to check
//from http://stackoverflow.com/questions/818704/how-to-convert-securestring-to-system-string
//
IntPtr valuePtr = IntPtr.Zero;
string secureStringValue = "";
try
{
//get the string back
valuePtr = Marshal.SecureStringToGlobalAllocUnicode(str);
secureStringValue = Marshal.PtrToStringUni(valuePtr);
}
finally
{
Marshal.ZeroFreeGlobalAllocUnicode(valuePtr);
}
return str;
}
//from http://stackoverflow.com/questions/311165/how-do-you-convert-byte-array-to-hexadecimal-string-and-vice-versa
public static byte[] HexStringToByteArray(String hex)
{
int NumberChars = hex.Length;
byte[] bytes = new byte[NumberChars / 2];
for (int i = 0; i < NumberChars; i += 2) bytes[i / 2] = Convert.ToByte(hex.Substring(i, 2), 16);
return bytes;
}
public static SecureString DecryptPassword( string psPasswordFile, byte[] key )
{
if( ! File.Exists(psPasswordFile)) throw new ArgumentException("file does not exist: " + psPasswordFile);
string formattedCipherText = File.ReadAllText( psPasswordFile );
return ConvertToSecureString(formattedCipherText, key);
}

Comment puis-je accomplir le ConvertTo-SecureString -clés (1..16) partie en C#/.NET?

Veuillez consulter le code suivant:

    private static SecureString ConvertToSecureString(string encrypted, string header, byte[] key)
{
string[] strArray = Encoding.Unicode.GetString(Convert.FromBase64String(encrypted.Substring(header.Length, encrypted.Length - header.Length))).Split(new[] {'|'});
SymmetricAlgorithm algorithm = SymmetricAlgorithm.Create();
int num2 = strArray[2].Length/2;
var bytes = new byte[num2];
for (int i = 0; i < num2; i++)
bytes[i] = byte.Parse(strArray[2].Substring(2*i, 2), NumberStyles.AllowHexSpecifier, CultureInfo.InvariantCulture);
ICryptoTransform transform = algorithm.CreateDecryptor(key, Convert.FromBase64String(strArray[1]));
using (var stream = new CryptoStream(new MemoryStream(bytes), transform, CryptoStreamMode.Read))
{
var buffer = new byte[bytes.Length];
int num = stream.Read(buffer, 0, buffer.Length);
var data = new byte[num];
for (int i = 0; i < num; i++) data[i] = buffer[i];
var str = new SecureString();
for (int j = 0; j < data.Length/2; j++) str.AppendChar((char) ((data[(2*j) + 1]*0x100) + data[2*j]));
return str;
}
}

Exemple:

    encrypted = "76492d1116743f0423413b16050a5345MgB8ADcAbgBiAGoAVQBCAFIANABNADgAYwBSAEoAQQA1AGQAZgAvAHYAYwAvAHcAPQA9AHwAZAAzADQAYwBhADYAOQAxAGIAZgA2ADgAZgA0AGMANwBjADQAYwBiADkAZgA1ADgAZgBiAGQAMwA3AGQAZgAzAA==";
header = "76492d1116743f0423413b16050a5345";

Si vous souhaitez obtenir décrypté caractères, veuillez vérifier données dans la méthode.

Ajoutant à Cheng de réponse - j'ai trouvé, j'ai dû changer:

byte[] magicHeader = HexStringToByteArray(encrypted.Substring(0, 32));

à

byte[] magicHeader = HexStringToByteArray(psProtectedString.Substring(0, 32));

et

SymmetricAlgorithm algorithm = SymmetricAlgorithm.Create();

à

SymmetricAlgorithm algorithm = Aes.Create();

mais sinon il fonctionne à merveille.