Source Schema for the Cryptography Application Block

Microsoft Enterprise Library 5.0

DropDown image DropDownHover image Collapse image Expand image CollapseAll image ExpandAll image Copy image CopyHover image

This topic lists the XML elements and attributes used to configure the Cryptography Application Block. You can manually edit the XML data, but the Enterprise Library configuration tools greatly simplify this task. If you choose to manually edit the XML, use the schema information contained in this topic.

The configuration file has the following section-handler declaration.

XML Copy Code
<section name="securityCryptographyConfiguration"
         type="Microsoft.Practices.EnterpriseLibrary.Security.Cryptography.Configuration.CryptographySettings,
               Microsoft.Practices.EnterpriseLibrary.Security.Cryptography" />

The section-handler declaration contains the name of the configuration settings section and the name of the section-handler class that processes configuration data in that section. The name of the configuration settings section is securityCryptographyConfiguration. The name of the section-handler class is CryptographySettings. It is in the Microsoft.Practices.EnterpriseLibrary.Security.Cryptography.Configuration namespace.

securityCryptographyConfiguration Element

This securityCryptographyConfigration element specifies the configuration of a Cryptography Application Block. This element is required.

Attributes and Child Elements

The following sections describe attributes and child elements of the securityCryptographyConfiguration element.

Attributes

The following table lists the attributes for the securityCryptographyConfiguration element.

Attribute

Description

defaultHashInstance

The hash instance to use if none is specified in the code. This attribute is optional.

defaultSymmetricCryptoInstance

The symmetric key instance to use if none is specified in the code. This attribute is optional.

hashProviders Child Element

The hashProviders element is a child of the securityCryptographyConfiguration element. It lists the hash providers that can be used by the application. This element is optional.

add Child Element

The add element is a child element of the hashProviders element. The add element adds the name of a hash provider. This element is optional. There can be multiple add elements.

Attributes

The following table lists the attributes for the add element.

Attribute

Description

name

The name of the hash provider. The name must be unique within the section. This attribute is required.

type

The type name of a class that derives from the HashAlgorithmProvider class. This attribute is required.

algorithmType

The type name of a class that derives from the HashAlgorithm class. This attribute is required.

saltEnabled

Specifies whether SALT is enabled. A SALT value is a random string pre-pended to the plaintext before hashing to improve the security of the algorithm. Possible values are true and false. This attribute is required.

protectedKeyFilename

Specifies the absolute path and the file name of the file that contains the encrypted key. This attribute is required for keyed hash algorithms.

protectedKeyProtectionScope

Specifies whether the machine store is used for storing secrets or the user store. Possible values are CurrentUser and LocalMachine. This attribute is required for keyed hash algorithms.

symmetricCryptoProviders Child Element

The symmetricCryptoProviders element is a child of the securityCryptographyConfiguration element. It lists the symmetric cryptography providers that can be used by the application. This element is optional.

add Child Element

The add element is a child element of the symmetricCryptoProviders element. The add element adds the name of a symmetric cryptography provider. This element is optional. There can be multiple add elements.

Attributes

The following table lists the attributes for the add element.

Attribute

Description

name

The name of the symmetric cryptography provider. The name must be unique within the section. This attribute is required.

type

The type name of a class that derives from either the SymmetricAlgorithmProvider class or the DpapiSymmetricCryptoProvider class. This attribute is required.

algorithmType

The type name of a class that derives from the SymmetricAlgorithm class. This attribute is required for non-DPAPI symmetric providers. It is not valid for DPAPI symmetric providers.

protectedKeyFilename

Specifies the absolute path and the file name of the file that contains the encrypted key. This attribute is required for non-DPAPI symmetric providers. It is not valid for DPAPI symmetric providers.

protectedKeyProtectionScope

Specifies whether the machine store is used for storing secrets or the user store. Possible values are CurrentUser and LocalMachine. This attribute is required for non-DPAPI symmetric providers. It is not valid for DPAPI symmetric providers.