Content Encryption and Signatures

Hi there,
I wonder if there exist any interface implementations or adapters realizing signing and encrypting/decrypting message content.
Wouldn't XI be the ideal central place to handle a general security concept for data being exchanged over public networks?
Of course the XI server itself would probably quickly be overloaded if encryption/decryption were deployed directly to 'the' adapter engine (btw, can the adapter engine be distributed over several machines?) but close integration with a security platform and handling of security measures by the business process engine seems highly desirable to me.
Any knowhow or practical approaches on this issue out there?
greez,
tony

you can use different encryption decryption algorithms already existing in java,
see the following url for examples
http://javaalmanac.com/egs/javax.crypto/PassKey.html

Similar Messages

Outlook 2010 "forgets" Encryption and Digital Signature preferences

We have several users in our enterprise environment who's Encryption and Signature preferences are not being retained in Outlook. They, seemingly randomly, lose the selected Sign and Encrypt all mail options throughout the day. We are using smart card certificates,
Outlook 2010 and Exchange 2010...
Has anyone seen this or do you have suggestions on what to look at?

Hi,
How did you use the smart card in your environment? Did you use a reader that is attached to your computer or it is inserted to the USB interface of your computer?
Does those users who have the problem use the smart card in a different behavior comparing to those don’t have the problem?
We should keep the smart card inserted when you want to digitally sign or encrypt your messages. When the smart card is removed, the certificate is no longer available.
If I’ve misunderstood something, please feel free to let me know.
Regards,
Steve Fan
Forum Support
Come back and mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback on our support, please click
here

Encryption and Digital signature in SAP

Hi,
We have a requirement to encrypt the payment data before it is sent to a Bank using SAP XI.We are planning to have a ABAP proxy which will do the encryption and hopefully attach a digital signature.We are working in SAPR/3 Enterprise edition.Does SAP supports doing Encryption and digital signature in ABAP.
Thanks,
Leo

Hi Leo,
have a look here:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/icc/secure store and forwarddigital signatures user guide.pdf
regards Andreas

Biztalk PGP encryption and signing

Hi,
Currently i am working on a custom pipeline component to PGP encrypt and sign the outgoing message from Biztalk 2013 with public and private keys.
I am referring the content mentioned in the below posts
https://code.msdn.microsoft.com/windowsdesktop/BizTalk-Sample-PGP-ebcbc8b2
http://bajwork.blogspot.co.nz/2007/08/pgp-pipeline-component.html
But we have a requirement to use PGP version 6.5.8 and i could not find what PGP versions the above components supports.
Any one has any idea about Biztalk and PGP version 6.5.8 for encryption and signing?
Thanks
JB

PGP has different versions and 6.5.8 is older one. If just download the Bouncy castle pgp dll, it’s not going to use the 6.5.8 version of PGP.
http://www.pgpi.org/products/pgp/versions/freeware/win32/6.5.8/
With latest Bouncy castle pgp dll, there are few issues encountered by the user you tried to use PGP version 6.5.8, especially around signature validation. Following are the discussion on
the issues faced..
http://stackoverflow.com/questions/7193323/encrypt-with-bc-and-decrypt-with-pgp-6-5-8
http://bouncy-castle.1462172.n4.nabble.com/ERROR-encrypted-session-key-is-bad-when-trying-to-decrypt-td1466221.html
http://bouncy-castle.1462172.n4.nabble.com/Compatibility-Issue-with-PGP-6-5-8-td1467170.html
People have manage to get it working with few changes to the PGP code (which you can get it here
http://www.bouncycastle.org/csharp/index.html )
This forum is not the right place to raise question about finding the Bouncy castle pgp dll version compactable with v6.5.8. try to post this question here
http://bouncy-castle.1462172.n4.nabble.com/
Once you have their dll compactable with v 6.5.8, then you can use it in BizTalk suggested by the links referenced by you.
If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful by clicking the upward arrow mark next to my reply.

Body and Signature not getting in reciever mail adapter

Hi Friends,
My requirement is the reciever mail adapter having the Attachment and Body and signature.
Here i am getting Attachment only. I am not getting Body( example: the ftp successfully genrated this file abbc_12/03/2014.txt) and Signature.
Signature like
Thanks
company name.
Thanks
Bhanu

Hi Galla,
I have some doubts about your scenario, Is your scenario FTP to MAIL?, do you want to send the file as attachment or you want the file content as mail body or where the body is taken? where is the signature, inside the file?
Meantime, you can check these documents about file-mail scenario:
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/a0a27c01-26b0-2c10-bd8a-94498efa7ff6?quicklink=index&overridelayout=true
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/5083371b-5bd2-2e10-3f8b-ad877d24c9ce?QuickLink=index&overridelayout=true&52475910426407
Regards.

Help required on Encryption and Signing.

Hello All,
Client:
Client is having his own Private key and the public key of the Server.
Server:
Server is having his own Private key and the public keys of all the clients.
When a client wants to send a document to the server with both encryption and signed,
then he will encrypt the document with the server's public key and then sign the encrypted document
with his own Private key.
And then sends it to the server.
When the server receives the signed object from the client, he has to verify the signature with
the public key of the client and he has to decrypt the document with the Pirvate key of the server.
How can we verify the signature?
By just saying,
Signature sig = Signature.getInstance("SHA1withRSA");
sig.initVerify(kp.getPublic());
boolean verifies = sig.verify(realSig);
where "realSig" is the signed object.
In this case i am unable to verify the signature. Even if i succeeded here in verifying the signature,
how do i decrypt the signed object.
My question is,
When the client sends signed object to server, does he sends anything else along with it?
Say for example if he sends the encrypted document along with the signed object then if i say,
Signature sig = Signature.getInstance("SHA1withRSA");
sig.initVerify(kp.getPublic());
sig.update(cipherText);
boolean verifies = sig.verify(realSig);
where "cipherText" is the encrypted document.
In this case i am able to verify the document and since i will have the encrypted document
along with the signed object i will decrypt this using the Private key of the server.
So is it must and should that i need to send the encrypted document everytime along with the signed object to the server.
Thanks and have a nice time.

I have two suggestions for you
First read a good book about cryptography. Even using secure cryptographic algorithms is no guarantee that your solution is secure. Without thorough understanding of cryptography and security someone might break in due to some implementation mistake in your security mechanism. My recommendations: "Applied Cryptography" written by Bruce Schneier and "An Introduction to Cryptography (IntrotoCrypto.pdf)" by Phil Zimmermann, Network Associates. This PDF document can be downloaded as part of the free PGP product from http://www.pgp.com, http://www.pgpi.com or http://www.nai.com
Second take a serious look at S/MIME. S/MIME allows information to be wrapped in signed and/or encrypted data blocks in a secure way. The S/MIME standard is around for a few years and has been thoroughly reviewed. Bouncycastle (www.bouncycastle.org) contains an library for creating and handling S/MIME data. Never invent your own formats when a standard is available. More information about S/MIME can be found at RSA labs (www.rsa.com or www.rsalabs.com).

File to SOAP (Synchronous) with certificates Encryption and Descryption

Hi,
Can anybody advice me how can I develop the scenario file to SOAP (Synchronous Process) with certificates encryption and descryption.
Thanks,
Naidu.

For file to soap sync scenario without using BPM, you need to use the following adapter modules.
http://help.sap.com/saphelp_nw04/helpdata/en/45/20c210c20a0732e10000000a155369/content.htm
http://help.sap.com/saphelp_nw04/helpdata/en/45/20cc5dc2180733e10000000a155369/content.htm
For applying certificates, you need to configure SSL on java stack.
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/197e6aec-0701-0010-4cbe-ad5ff6703c16
Regards,
Prateek

Font encryption and substitution problems

Please let me know whether Adobe content server has the option to verify a pdf for font encryption and substitution problems.
regards,
Sashi

No, for anything other than basic format issues you will want to use Acrobat for verification and modification of the PDF file.

What's contents encrypt code of embedded image in IDML file?

Hi guys,
Does anyone has idea what's contents encrypt code of embedded image in IDML file?
I want to use C# to get the binary data of contents and save it as image. But it seems to me it's not using Base64.
How can i translate the contents to image?
Thanks in advacne.
Here is the sample file.
<Image Self="uda" Space="$ID/#Links_RGB" ActualPpi="96 96" EffectivePpi="96 96" ImageRenderingIntent="UseColorSettings" LocalDisplaySetting="Default" ImageTypeName="$ID/Portable Network Graphics (PNG)" AppliedObjectStyle="ObjectStyle/$ID/[None]" ItemTransform="1 0 0 1 -159.0221922373429 -106.13981227162273" GradientFillStart="0 0" GradientFillLength="0" GradientFillAngle="0" GradientFillHiliteLength="0" GradientFillHiliteAngle="0" Visible="true" Name="$ID/">
- <Properties>
<Profile type="string">$ID/None</Profile>
- <Contents>
- <![CDATA[
iVBORw0KGgoAAAANSUhEUgAAAagAAAEbCAYAAACP7BAbAAAAAXNSR0IArs4c6QAAAARnQU1BAACx jwv8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAAP+lSURBVHhe7F0FmFRX1iRKBI8nu/+6u2SzcXcj 7u4hTiAhuLu7u9ugY8wM4+7u7u7DIPVX3e43NJOBhgAbg+87tLzW6fde3TqnTp1OOPPvzF/gzF/g zF/gzF/gzF/gO/gX6JRVdRCK7OpD9jiAnJqDyK89dEQU1B2EYxTWHkRR3aGjRnHDQZQ0HjpqlHOb Y1Q0AaczKpsBx6hqARyj/Xbrdttnaj6IypZDqNoHVLcCdQcOoeEA0HgQaGHwbuw3cQgHGc7+HeRD jhn219FrHc/rOXu/jrbrdVv5Ofbxg+h7NPA71e4/yO+4HxWtB1HG76zfUL+z9oeCOqCw/hDjAI71 +5byt3QWZfw9TmeU8/c9VpzO99ZrO9uXnb3/0fbHU3W/s893ure3P/5P/W3+/o2Ho/25qLgeZt/W ++pvWs2DuJbHdf1+HdeH0HzwIFoO2Y4PHdc6VhyPal0/Vhw4dBDHCr2uOfb4OiZ4XecRHYeKenvo s9TzmNSlOdfwM+nx1vN1DnH8HN/kPHA6nnOIn/NocZB/W+vzH/E34AfhT4EmfiNd6t/XAErgdDwA dTRw0g9v/fgdAZR14vo+ANQRB+mPHKAETt8ngHIGAKd7u7MTvLP3P1VA9E1fx9nn/7a3Owe0bxeg rIXl0S5/6ABlgd7RQMq2mG8H0nawFjgdAVCH2dMhA07tAcp2cjqSQXUEUBY4HQ2gHFfV3yWAcsqe xO7OAFQbQBWRHX/XGZQzADjd252dwJ29/zcFllP1PGef/9vefgagbCf37yqDcmRlHYGUBVBHAymx RMOgjgQnfA2grJWzM4ByBKeOAKp9yue7AlDHOqCtg1Cf9YcOUE3c2a0UX3Xrga+l+BwZ1BmAcp6e dHYCPwNQztOgx/obngGo7w9ACWjag5RV3jgak2K29TBA5dQImGyRy1qD4jAw2VI7FkDZahBfrz19 3wDquFgTmZN1IDgClOpQP7QaVEcAVc6am1WD+r4B1MkChDMAcbbd2fs7236qmNB39XWcff+T3e5Y f9L1/3UN6kyK78jK1tEASkBlsSjHelQbQB0JTscGKAuc2gNUe3Bqz6A6Kph/2wyqowO3o4Oi7XM2 kVUwzSdw+qEAlIqrVi5cAKUirIDXYlBnAMo5UzoaUJ3sCfa7Ciyn6nOd7N/H2fPPANTpkD6c3Gs6 glR7gZgjSFnnJJPiO8ycBE5HByhHcHIEqI7AyRGgjqbm+q4B1NF2+PYAZSn5fggMSgBl7RhHAyj9 fqo32gQSvN6g+O7XoJydwJwxoJPd7uz9nW0/VUDwXX0dZ9//ZLefAaiTA5PT9ezDIPV1FXN7kDoq QOXZFVuOab72AHU0YDLgxJPYsWTGOvi/DwB1xGe0M6gfC0BVUm4rBqXfUb+pwOn7BFDOTswnC0DO nn+yJ1hnn/9kt7dvszjetouTfd9T9Xxnf99vG6CcydB/LCq+YwEdlehHtNq0F07YAepgu7qTTa2X X3vgyL4ne+3JsCcCkFRcjvF1Sbl6aI4eznaw071dB8qxWFNJM+svDJ2gre9WSpohgKrm3qWeCUcW pT4Gx14oZyuQ70IflD6jlQO2ejDUf2Gl+ar2HeT3P2R+Z7Eo9b6pB0rR/vc+URGMEZ4cpfftWL+N 9ZxTdaI73lrkqd4fnX3+9u/3tcdzP9S++I2jXV+gsz5BZ4D2te18/aqTiPaf52t/D+47lccIPb49 SFm3yxpstVXt25YAqpp9czU8iOt5XJv+RvYxWT1HVn+jBTrOjm0jCnASrXx9WxyWWuv9mvneisN9 ULbPY/VcapuO1SN6tOy9UG2fy3kb5vF8hdP6mK/VpBz6PtU/pr/5MQHqa425ljjCpHicA5R+/GPF qT7gT/T1zgCUbQc4A1BHNnB/rUH7NDWQf9cBytnnc7b9ZMBJzz0DUDaQssDphwZQFvpZQNVeVNIG UJZqz3IKaA9Mun2EOKIDgOq4IfcMQB1rCXKGQZ1hUMfT4nBUxngy7EnPdcKgTnb7GYA6Nov6sTMo x3OjQKo9QIlZGgYlgDoMTqwzKI3DaC8rt1J7tiL5YQZ1NDujMwzq2Az5DECdAagzAHX0NOAZBvXj YFDWWfKoAGV57hmVFlV8bR57rDMU2ePYtaYj/fYO1yLOMKgzDOqw32L7FKyzGtTJruBP9vknmjI+ 0cc7+3zfdg3K2edztv0MgzrDoE6kiNUeoA4wvWkYVJsJqAEnm6TYxEmBk1R8ZwDqDECdAahjCUHO MKgzDOrHKpJof25URs8RpI4AKBtzEjjZAKqkA4A6ljO5TRHTXlp+BqDOANQZgDoDUN9MzXcmxffj SvFZqsc2kLJqUGJQjgAlcLIA6mipPUfp9WEJ9pEAdbr7RE40pdJRyuSMzPy7q+JzlkI63dtPdv9y 9nxnn//bTvE5+/zOtp9J8Z1J8Z1Iiq+9LF81epPiK6D/XkGNDaQsBiUWZYGTegYUbZ50mqHCvpij 9Rgcvv/IeU/OzR1P7XyoY/VIaJvzz2P1Udg+V5n5zra+E1kdnWwfVNuKwd6sJkp7hHDitM+DsiV5 LTcJ9XAZPz6G5K36fuqDkr2T+tm0P0goo1qlGrnbu5k7pnS1OGmf4m2/YHF6AnaiMnN2gqylTrWU aWo9rpRfSLfVq1POhmt9rxIa4lbva2G0opLfvUgzgRqa0cBt+o7f9gLLGYCdaF+SM0bi7O95otud fX6n2530OTk7vjuqeR55zB/ps1nFnkf1QdVxP9H+f7J9UM5OzpobZ4sj+6BMj1M7ebmj1Ny67jgX qqN5Vc7e/7u+3ZqB1ym/2gZQFkhZdSjjFMGT0mGAsv2gFfZwBlAnukOf7Anrazv8cTTyHesztgfa MwD1/QIo6/eqJvLqd9alASwCbg2P6AoqUevqWpFbUGlzy+DtWpqKKir42O86QDk7wTtzhjjZ49PZ 8519PqfbzwDUET1Q7UHqRwVQxwKpIwGKB++PFKCs1dcZBnV6GJROeE5PWg6sytkJUmCkk7TNUcDW 96P7xBB13dsjFAHuvlg8ZwlSsmtRRdCq0WfgmaCElz8kgOro7+rs73ey20/kt+zwsWcA6gxAGRUf GZQNoA6n+hzVfKVkUrYUny3lpZWnQOrHwKCsg9QxNWCzOjqT4jvVKT7rb328J7bjOYFaoKS0ngVS PO8hLqMEq+YvR05UBFbMmolV67ahxLjU7ye7akYpU38/FIA62t/zeP5+J/OY4/0dj/q4MwB1BqAM QFU5ApTVC3VYci7BhA2k7EDFOkQ5oz2zagOwU2QNc7I7uLMirbODz4Cx/bu01d900JwBqFNSg3L8 mzr7Lb7JdgGMzQtyv0nZFTe00vyWIMTFxXbvKKxctAq5sbFwWb0Sb3/8JVwj08B1GsqbG1HcVP+t A5Sz7/xNjw9nr/td2e6sxuRs+5ka1He9ynR8n69THivEHYGUVZcqpquEI0gJnBwB6gh2dYrA6UTT PR0drCcLUI47+BmAOvUiCUdWejpOiuUEKOOazwVFRSvrZ3UtBqC4O8MzKAXjJy5DbloeArxDcMvD r+PvD76LDIojqrldn+fbZlDO/ibfBKCcveZ3abszAHK2/QxAHR8AfNcf1Sm3ghN0GQao7Ok+2yUd zRlF1TbZeRtISeFEfz6LQf0YAMqqY+hSCr4zKb6TV/Gd9nErqj/xtzJDF5v2objRlrbj+grJeS3Y FpSOxIwiNLD25B5bikv/+zw+nbQe3L1N+vqHBlDfJfA5ns/iDICcbT8DUN916Dm+z9cpu+wAcso5 ckNAVXkQeVUEKxMH2gCqmPUpC6TKDEDZ0n1fE1A4MKhvssJzfM6JymhP1O7f2efraAc/A1CnTmZ+ ugFKKlQjd29uJTg1GRZlGsqZqs4qZRCoKmhSWda6D0U8Vmb7ZuD3972ELMr9JLH/rgOUs5P8/1pW 7uzznOh2ZwDkbPsZgDo+APiuP6oT68XIYmTzoM0pY5RTpcXLfIkm2BulUH+U1SdVKnDiwa/eEoXF oL62Q3BpWtFIJRX7CypbJO/lbUZlSytPFvvNiaOsZT/K97GAzdBjFOpRsYWNrVgh1uIYzgDGmczW UeQhmbF1Qio1JzUGP5sVJfysJS0tJspaWcvYvx+NPOE1HThgYt/BA9AMk4M4wM6GVhM4xKX5MYO7 hlqRGIc448UK676Dut+a6+LYxWY9p4OZL/IE1mfglJnj2O8O90Gp/0p9ULb+C/aCMNQT0r4PyjYn jAsZhumV03BKu4uI48wsZzZX1hyeY6X5nP2+zk54pRRG5Cq9x32uis0t5fw5tJ/VklllVRCcDjaj qn4fKvc1I5ughdYmPDRuEya7pZu+KL2/tQCzUs4m9WcXDDl7/5Pd7qxP71hpcO37ZwDqyHlvX/97 2n5LKTu1zdYHxdYD9UFpHhSPBfUF6piQHZGOEXM8nshQqGMchZa1jzWkr83yyP6een+FJS+v5wDR 9qM32s+FOkUf7TjOHf+7h3SKL9mPpNJWJJftR0r5AaRWHER6xQFkc4mSW9OMPB7R+XX7TA5foWKz Cs9Wn5ROTLZcvy2UVlHU8j4r+DKoVnrMDDCjCk7FakmGHZQ6uq3HWFHJk5+iiiePDoOTu6rsUc1f qn3UEGDaRzWBxoo69sM4Rg1vV/Ok1hZM81Qr9Ll5WcmduYp7jL6LTnJ6P53Ea/cfNCd1M0iMe7Bt R7O1mR1vdORsriY+vmRbfK3Tmgh2kHF48BfBUShnIZzTfej4AEqiEGto4fcJoNTvlG8tjriQyud+ lMMfrpAMKTQTyCWGczPZVSMbz3mdfy+/rDI8P34X8rUwsp/kj6xF2pWsp7DWejJAdjQQPwNQXx9G 2hFA2RapNld9C6BMAz5RQ8e0AMIaQmqOPx7fCrOaPMl/ZwDq+P6AnWJzgNicg4jLPYTEfCCpgDn6 QiCtcD8yig8ih+wqt5QpP7KqAkYhGVYRl5g5bBzJrT6AvJojp+9aE1ct1nW4Cdg2ldUaFV/GnUKj 4a3bZkw8dxjrPl06hrYdEXYz2o5SMQLKMp6gjhUCG0Vl01GC718pST1BstwekthX8XPX6OQlpwXu yCQV7DrnaksMhHF4qi5Ml/jRooUApGgmoHQUTWRBzXx2CyFKsY/XFa28vt/BVtFYLDoeMMe9jPph A5QWEAIowwL5u6VSrZpU2YiU0n3YEd6MvVRE5DIbUMMFRgWZVA5/OP3pBq6KgVdyjQEoK2w1yO8W OJ0ogxKYnQwY/q+f6yyF52z78aX4bH8T/W1sE3Xt7SPGTYIAxYWmjmflRGwecdYC0Bqnd3wn2Y4e dToAyrC8b/6RvpPP7OQaVwO3+Fq4J9RhT2I9vJMb4ZPSBP+M/QjMOohgAlhYri3C84BIRpSArLDV RHLRPqQUt5pI5cFvRVIlmVlFKxLL95nLVIJZGsEsnemhTDpXpLPGlcbHOEYKz/hWaLsVGRRrWKHn muAJ55jBFGWmQ2QxVXlEVPO2PbL5OEUOH5NrBUEphycwRTalX1k1ZJW8zCOTKhC42kdGm53b3hdl jYs2bMoOWLrU6vxo0cRdSqGDQWHdbtBt+zbrvrbucQN8NqsUHTJtO6XZ67nKs6yAj7nLHRugtJLU aHtHBmVZHX0fUnwCqAIDUPwe/OMncmGVwP0rmem9tYHN2BLUANcUprP5O+u3kSS9nmCVzN9/R2SJ AST9tsYeSaIJ/u6Oqb7/9Qm7o/c7EQZlPfa78LmP5zM4AyBn208EoNozKKX41NCtRaf2jX0mab6f aXzH5ebJnc9PBUA5Zm2M3dEPEaAWe2ZjyZ4crPDJxWq/AqwNKML6oBK4BJdie2gpXMMr4B5ZBY+o auyJroZXTA28Y2vhHV8Hn4R67E1sgF8yAS2lEQGpTfZogH9WPUGuzkRAZi1CeDuUyf6w7DqEEinC eV9kdj2icxsRkWu/n2gQlluPiPxGs82KqJwG87iYvKa2iM3fD8eIyWvltsMRV9AKRTyZYEcRW9IK RRyBVWnOxGJbJJUcMKGUp0Lpz6TSFiSWNJvLFAKuQDW7soVCklamPfdTQHLAlstm3U2MrJrsropp 0GOGTp726JjF8fncAx3TjrVMQSot2cCTbg3reHUEIqUilIsWJpkcualRHc866gcOUPxbCaBM3xpB JoY11gQtjAhAa4Nbscx9P+Z5H8DE3ZXgT4aaukoU8nfj7oAQrnyKad5ngVR79uTYI3c8J9vT9Zhj AZTF/pzV8r6z2/8njbqH/fja16DMuHUeRgIoVXS1GLQxKAukvjsAtY/He1ud7OQ+1nfu2Z3eWZiA PkuS8dHyNHy6Kh391mThi3U5GLk2GaPXp2LCpgxM2pKFKS5ZmLY9BzN35GHWznxMccvDVPdcTPfM xyzvIszZW4J5fiWY71+KBQFlWOZbgKV787FibwFW2YFvY2AJNgUVY3NwCbYEFhsQVGwhIG4IKDSx
]]>
</Contents>
<GraphicBounds Left="0" Top="0" Right="318.0443844746858" Bottom="212.27962454324546" />
</Properties>
- <TextWrapPreference Inverse="false" ApplyToMasterPageOnly="false" TextWrapSide="BothSides" TextWrapMode="None">
- <Properties>
<TextWrapOffset Top="0" Left="0" Bottom="0" Right="0" />
</Properties>
<ContourOption ContourType="SameAsClipping" IncludeInsideEdges="false" ContourPathName="$ID/" />
</TextWrapPreference>
<Link Self="ud9" AssetURL="$ID/" AssetID="$ID/" LinkResourceURI="file:C:/Users/dkzhang/Desktop/Templates/Images/Hand.PNG" LinkResourceFormat="$ID/Portable Network Graphics (PNG)" StoredState="Embedded" LinkClassID="35906" LinkClientID="257" LinkResourceModified="false" LinkObjectModified="false" ShowInUI="true" CanEmbed="true" CanUnembed="true" CanPackage="true" ImportPolicy="NoAutoImport" ExportPolicy="NoAutoExport" LinkImportStamp="file 129786755834128158 234438" LinkImportModificationTime="2012-04-12T11:39:43" LinkImportTime="2012-04-16T10:37:47" LinkResourceSize="0~393c6" />
<ClippingPathSettings ClippingType="None" InvertPath="false" IncludeInsideEdges="false" RestrictToFrame="false" UseHighResolutionImage="true" Threshold="25" Tolerance="2" InsetFrame="0" AppliedPathName="$ID/" Index="-1" />
<ImageIOPreference ApplyPhotoshopClippingPath="true" AllowAutoEmbedding="true" AlphaChannelName="$ID/" />
</Image>

Ryan_Zhang wrote:
After checking, it's using Base64 encode.
It sure is. Be careful, though; large images could be split up into several consecutive CDATA parts.
I wrote a Javascript to do the same, but it's extremely slow. A plain C version (I did not even use the '++' part) does the job in less than the blink of an eye.

Files encrypted and digital signed with cFolders

Dear all,
Currently I'm involved on a PPS project with cFolders. This project has legal requirements that consist in implementing encryption and digital signature in files which will be uploaded to cFolders. I've been searching on SAP Help, SDN and Service Marketplace about APIs to work with cFolders with encryption and digital signatures, but I didn't find related documents. It seems there is no documentation regarding such scenarios...
Anyone has experience in cFolders with files encrypted and digital signed?
Thanks in advance & regards,
Ricardo.

Hi Federico
If I understood your solution you are signing your documents in a Webservice provided from a CA. For that youu2019ve created an RFC dest type G over ssl (https) and used the class CL_HTTP_CLIENT. So your requirement is only to sign documents, right?
Well my scenario seems a little bit different as Iu2019ve to encrypt the file and also sign it. The signature is done on useru2019s laptop trough a smartcard (hardware device connected via USB that reads the chip the certificate assigned to our identity card) and cannot be signed from other entity than the user itself.
Did you explore the PGP alternative? cFolders supports this kind of files (*.pgp). The PGP (Pretty Good Privacy) is a popular program used to encrypt and decrypt files, e-mails, etc.
Today I installed a trial version of a PGP tool. I tested the encryption/signature with files on my desktop and it works fine. I tested a Public Key scenario where the owner publishes his PK in cFolders and the requester gets this PK in cFolders as well. The requester now can encrypt documents and upload them to cFolders with the public key provided by the owner; the owner itself has the private key to open the encrypted file (extension .pgp) after upload. But over the encrypted file the requester must sign it with his private key (another certificate) provided by a CA and here starts the second challenge...
In cFolders after the file upload the system should gets the requester digital signature and sends it to CA for validation, only after that we know if the requester is a trusted partner or not. To do this we are thinking to use a Webservice provided by the CA, however I don't know how to extract/get the signature in the file encrypted/signed from PGP and uploaded to cFolders.
Do you have any idea?
Thanks & regards,
Ricardo.

Unable to retrieve public key and signature.

Hi,
I'am trying to send public key and signature from one client to another via server.
Both pub_key and signature are encrypted into base64. But i cant retrieve them correctly in server side.
I'am using ECDSA to sign message key_length 224bit. Sending and retrieving data via sockets.
SEND DATA FUNCTION Client.java
private static PrintWriter      output_stream = null;
private static Scanner      input_stream           = null;
private static void send_message(String message)
     if(user_name != null
          && message_text_area.getText().equals(SERVER_CLOSED) == false
          && message_text_area.getText().equals(SERVER_CONNECTED) == false
          && message_text_area.getText().equals(MAX_USERS_ONLINE) == false
          && message_text_area.getText().equals(CONNECTION_CLOSED) == false
          && message_text_area.getText().equals(GET_USER) == false
          && message_text_area.getText().equals(REMOVE_USER) == false
          && message_text_area.getText().equals(USER_EXISTS) == false
          && message_text_area.getText().equals(USER_NICK) == false){
         String signature = new BASE64Encoder().encode(ecdsa_parameters.sign_message(SESSION_KEY_PAIR.getPrivate(), message_text_area.getText().trim()));
         String public_key = new BASE64Encoder().encode(SESSION_KEY_PAIR.getPublic().getEncoded());
         if (signature != null && SESSION_KEY_PAIR != null){
          synchronized(output_stream)
              output_stream.println(USER_NICK);
              output_stream.println(user_name);
              output_stream.println(user_nick);
              output_stream.println(message_text_area.getText().trim());
                    //PUblic key and signature in base64
                    output_stream.println(public_key);
              output_stream.println(signature);
                //length and data of them
          System.out.println(public_key.length());
          System.out.println(signature.length());
          System.out.println(public_key);
          System.out.println(signature);
          append_message(user_nick+": "+message_text_area.getText().trim());
          message_text_area.setText(null);
         }else{
          append_message("E_C_002: Unable to generate keys or signature.");
     }else{
         append_message("User is not selected or incorrect message");
    }HANDLER.JAVA (SERVER SIDE RETRIEVE)
private Scanner           input_data           = null;
private PrintStream      output_data           = null;
if(recieved_data.equals(USER_NICK)){
               String user_name = input_data.nextLine();
               String user_nick = input_data.nextLine();
               String message = input_data.nextLine();
               String public_key = "";
               for (int i=0; i<5; i++){
                   if(i == 0){
                    public_key = public_key+""+input_data.next();
                   }else{
                    public_key = public_key+"\n"+input_data.next();
               String signature = "";
               for (int i=0; i<2; i++){
                   if(i == 0){
                    signature = signature+""+input_data.next();
                   }else{
                    signature = signature+"\n"+input_data.next();
                        //output length and data of key and signature
               System.out.println(public_key.length());
               System.out.println(signature.length());
               System.out.println(public_key);
               System.out.println(signature);
               Server.users_messages.addElement(user_name+""+SEPARATOR+""+user_nick+""+SEPARATOR+""+message+""+SEPARATOR+""+public_key+""+SEPARATOR+""+signature);
          }It seems that length of key and signature in server side are different form client.
Maybe I'am missing something that correspond sending data in base64????
All project is here http://fmf.vtu.lt/~knugmanov/Elliptic%20curve%20cryptography%20instant%20messenger.rar
(import into eclypse).
For ECC I use iaik classes.
Thanks in adv.
Kiril

here is a code from
http://www.exampledepot.com/egs/java.security/GetKeyFromKs.html
This example retrieves from a keystore, the private and public key associated with an alias.
private and public key are having the same alias ?
i know a alias for my key but i believe thats for private key not for public key ......is it true that both private and public key have the same alias ?
and KeyPair is an interface and so its difficult to get a key out of it
public KeyPair getPrivateKey(KeyStore keystore, String alias, char[] password) {
        try {
            // Get private key
            Key key = keystore.getKey(alias, password);
            if (key instanceof PrivateKey) {
                // Get certificate of public key
                java.security.cert.Certificate cert = keystore.getCertificate(alias);
                // Get public key
                PublicKey publicKey = cert.getPublicKey();
                // Return a key pair
                return new KeyPair(publicKey, (PrivateKey)key);
        } catch (UnrecoverableKeyException e) {
        } catch (NoSuchAlgorithmException e) {
        } catch (KeyStoreException e) {
        return null;
    }Message was edited by:
Unknown_Citizen
Message was edited by:
Unknown_Citizen
Message was edited by:
Unknown_Citizen

SMB 3 Encryption and only x86 32 Windows 8.1U1

Has anyone else used the 32 bit x86 Windows 8.1U1 to map to a Windows 2012 R2 with
Set-SmbServerConfiguration –EncryptData $True and
Set-SmbServerConfiguration –RejectUnencryptedAccess $False ?
I have full success with 64 bit X64 Windows 8.1U1 client. No problems.
As soon as I try NET USE X: \\SERVERNAME.DOMAIN.EXT\SHARENAME the 32 bit client hangs for many minutes before finally mapping the drive. Any attempt to access the share hangs Explorer or the computer for many more minutes. So slow it is almost
impossible to use the machine.
If I set on the server:
Set-SmbServerConfiguration –EncryptData $False
The NET USE works fast and access is fast.
Or, if I turn off SMB2/3 on client, NET USE works fast and access is fast, like this:
sc.exe config lanmanworkstation depend= bowser/mrxsmb10/nsi
sc.exe config mrxsmb20 start= disabled
This is on a freshly installed 8.1U1, no GP, no apps or fully configured with apps and GP. Every 32 bit OS machine, including varied Sony and Dell hardware, VM's on HyperV Server, etc. Behaves the same against several 2012 and 2012 R2 servers,
although they are all similar in setup.
Thanks!

I have the same issue - I already thought, I am the only one, because I did not find any information about this issue until now.
The setup: Domain controller/file server Win 2012 R2, freshly installed Win 8.1 clients 64 bit and 32 bit.
64 bit clients work fine, 32 bit clients show the described issue.
I also created a file share with the data encryption option disabled and this share with clear text data transfer can be accessed fine by 32 bit clients as well. At least as long as no share with enabled data encryption was accessed before - I go into
that further below.
Overall it seems the 32 bit implementation is buggy when it comes to handling encrypted SMB3.
I monitored the communication with Wireshark and witnessed some interesting behavior which might help to understand the problem:
Protocoll negation works fine. SMB 3.02 is agreed on.
Tree Connect Request Tree: \\servername\share-with-enc-on results in sucessful Tree Connect Resonse
Client sends one Encrypted SMB3 package and immediately receives one encrypted SMB3 package from the server as responds.
And this is where it stops. Normally, the client should continue with sending the next Encrypted SMB3 package, but this does not happen.
Once in this state, it is also not possible to access the share without encryption (e.g. \\servername\share-with-enc-off) anymore. So I initially thought, the client is dead. But with some experimentation and looking at the network traffic I found out a
few things:
I you use a different name or the IP to access the server, it works fine. E.g. \\serveralias1\share-with-enc-off. Until you try to access \\serveralias1\share-with-enc-on - then you have the same issue as described above.
Looking at the network traffic, it seems - once the client is stuck - it sends some requests to access \\servername\share-with-enc-off encrypted and in clear text at the same time. At least I think it is, because it is a little random and also encrypted,
but usually with a Tree Connect Request an encrypted request goes out with the same ack number. The server happily answers both.
Before the client goes haywire, it does not send any encrypted requests when accessing \servername\share-with-enc-off
But looking at the network traffic, I also saw, that the stuck communication regarding listing the directory contents of \\servername\share-with-enc-on continued after about 20 minutes and completed successfully. I was then able to see the share content
in Windows Explorer on the 32 bit client. But if you initiate another request (e.g. by going one folder deeper) you are in for another waiting period. I did not test, if 20 minutes are constant or the time differs.
What I also saw in the network traffic, once the communication got unstuck is, that it finished very quickly, exchanging several encrypted packages doing that. So the theory of old hardware just being slow on the encryption/decryption part seems not to
be the cause.
Disabling encryption is acceptable in my environment, so I will do that on the server side in the share options as a workaround. But it would be nice to get a fix for that.
Kind Regards,
Martin
PS: I can provide a Wireshark trace file if required.

Hi, i had taken the back up of my fone on itunes, by mistake it had been encrypted and i have forgotten the password.how do i restore it?

hi, i had taken the back up of my fone on itunes, by mistake it had been encrypted and i have forgotten the password.how do i restore it?

Restore from iTune Backup
1. Settings>General>Reset>Erase all content and settings
2. You'll be asked twice to confirm
3. You'll see Apple logo and progress bar
4. You'll see a big iPad logo on screen
5. Configuration start
6. Set language
7. Set country
8. Select Network and input Password>Join
9. Enable Location Service>Next
10. You'll be given 3 options (a) Setup as New iPad (b) Restore from iCloud Backup (c) Restore from iTune Backup
11. Select Restore from iTune Backup
12. You will see picture of USB cable pointing towards iPad
13. Connect iPad to iTune (make sure iTune is on standby)
14. Tap Continue (computer)
15. Restore iPad from Backup (computer)
16. See progress bar with estimated time (computer)
17. See Restore in Progress on iPad
18. See Apple logo
19. See Apple and Progress Bar
20. Slide to Unlock
21. Copying Apps back to iPad (computer)
22. You'll see Loading/Installing/Waiting below the Apps (iPad)
23. Sync Music/Podcast/Movies to iPad (computer)
24. Sync completed (computer)

The difference between Telepresence Content Server and MSE 3500

Good day! Could someone explain me what's the difference between Telepresence Content Server and MSE 3500? Why do I need to obtain two these devices for sorting out my tasks? I want to understand gist of the first and the second devices.

In addition to what Jonathan posted above, here is a Capture Transform Share Solution Guide that goes over a little bit of what the TCS and MXE are and some possible deployment scenarios.
In short, TCS is used to record video conferences or lectures that can be streamed on demand or live using various streaming or distribution methods. One such distribution method is using the MXE 3500 to ingest the recordings from TCS and convert them to different media types and add in-video content such as logos etc. However, from the MXE, you can't send the video back to the TCS for viewing, you'd need to send that off to another viewing portal such as Show and Share.

Where are my photos on the PC after sync with an iphone? I know nobody out there is stupid enough to suggest to me that they are encrypted and inaccessible, right? Seriously? How stupid would Apple corporation have to be to do something like this?

Where are my photos on the PC after synching with an iphone? I know nobody out there is stupid enough to suggest to me that they are encrypted and inaccessible, right? Seriously? How stupid would Apple corporation have to be to do something like this? That would be just as foolish as making my music unusable on the PC...
Okay, Let's assume that Apple is indeed THAT foolish.......How does one get the photos from the phone to the PC and still use them?

The photos are still on your phone, and if enabled in your Photo Stream. They are not automatically transferred to your computer when syncing.
See iOS: Import personal photos and videos from iOS devices to your computer and iCloud: My Photo Stream FAQ
tt2

Content Encryption and Signatures

Similar Messages

Maybe you are looking for