Connection Strings app.config and encrypting

[Amy L.]

I have a .Net 2.0 windows forms application where a user will supply a
connection string for their database server during initial
configuration. I want to make sure this string is encrypted when its
stored in the app.config file or whatever xml based configuration file I
use. I can encrypt the data using the built in crypto classes in .Net,
but the question comes in how can I securely store the keys used for
encryption.

Is there any best practices or advise on going about doing this? Maybe
something even built into .Net for this?

Amy.

[raylopez99]

Re: Connection Strings app.config and encrypting

On Sep 22, 11:42 am, "Amy L." <a...@paxemail. comwrote:

I have a .Net 2.0 windows forms application where a user will supply a
connection string for their database server during initial
configuration. I want to make sure this string is encrypted when its
stored in the app.config file or whatever xml based configuration file I
use. I can encrypt the data using the built in crypto classes in .Net,
but the question comes in how can I securely store the keys used for
encryption.
>
Is there any best practices or advise on going about doing this? Maybe
something even built into .Net for this?
>
Amy.

It's over my head. Crypto stuff is pretty complicated but I noticed
reading some ads in Dr Dobbs Journal that a number of people have
crypto libraries that are cheap (less than $500) and easy (they say)
to use in VS.

If you're a professional programmer, I would just buy one of those.

RL