Security Briefs: Cryptographic Agility

Posted: Jul/24/2009 By: pankaj Points:15 Category: .NET - .NET Framework Views:106 Vote Up (0) Vote Down (0)

Even if you use only the most secure algorithms and the longest key lengths, there's no guarantee that the code you write today will remain secure. A better alternative is to plan for agility from the beginning. Rather than hard-coding specific cryptographic algorithms into your code, use one of the crypto-agility features built into the Microsoft .NET Framework. This article shows you how.Bryan SullivanMSDN Magazine August 2009

View Complete Post

Comments:

Be the first to comment this post.

Post Comment

Please login to post your comment

More Related Resources

Security Briefs: Security Compliance as an Engineering Discipline

Many companies starting out with the SDL are doing so in combination with a security compliance program. We'll show you some best practices and pitfall we've seen when employing SDL principles for compliance.Brad HillMSDN Magazine February 2010

Cloud Security: Crypto Services and Data Security in Windows Azure

Many early adopters cloud platforms have questions about security. We review some of the cryptography services and providers in Windows Azure along with some security implications for applications in the cloud.Jonathan WiggsMSDN Magazine January 2010

CLR Inside Out: Exploring the .NET Framework 4 Security Model

The .NET Framework 4 introduces many updates to the .NET security model that make it much easier to host, secure and provide services to partially trusted code. This article dives into the many features and benefits of the .NET security model.Andrew DaiMSDN Magazine November 2009

Security Briefs: XML Denial of Service Attacks and Defenses

This article reviews what makes XML vulnerable to denial of service attacks and how to mitigate these attacks.Bryan SullivanMSDN Magazine November 2009

Security Briefs: A Follow-on Conversation about Threat Modeling

This article explores the use of threat modeling to address security concerns in your applications.Michael HowardMSDN Magazine September 2009

Security Briefs: A Conversation About Threat Modeling

Listen in on a chat between a developer and security pro that delves into some of the major Security Development Lifecycle (SDL) requirements we impose on product teams here at MicrosoftMichael HowardMSDN Magazine May 2009

Security Briefs: Protect Your Site With URL Rewriting

Learn the numerous ways in which you can rewrite URLs to defend against common Web vulnerabilities.Bryan SullivanMSDN Magazine March 2009

Geneva Framework: Building A Custom Security Token Service

A Security Token Service, or STS, acts as a security gateway to authenticate callers and issue security tokens carrying claims that describe the caller. See how you can build a custom STS with the "Geneva" Framework.Michele Leroux BustamanteMSDN Magazine January 2009

Security Briefs: Getting Started With The SDL Threat Modeling Tool

The Security Development Lifecycle (SDL) threat modeling tool helps you develop great threat models as a backbone of your security process. We'll show you how it works.Adam ShostackMSDN Magazine January 2009

Security Quiz: Test Your Security IQ

Our security experts present 10 vulnerable pieces of code. Your mission is to find the holes (a.k.a. bad security practices) in the code.Michael Howard and Bryan SullivanMSDN Magazine November 2008