How to set hard-coded symmetric encryption in WCF using AES256?

Question

How to determine channel security in WCF for encrypted messages using a hard-coded symmetric key with AES256 standard? I do not want to use certificates, and I know that this is a "weak" security practice.

Answer 1

WCF does not support pre-shared key (PSK), more details here:

Does .NET support TLS-PSK?

Answer 2

There is no configuration option for this ...

You will need to work with MessageInspectors, MessageFormatters, etc. - for some good starting points see:

• http://msdn.microsoft.com/en-us/library/system.servicemodel.dispatcher.idispatchmessageformatter.aspx
• http://msdn.microsoft.com/en-us/library/system.servicemodel.dispatcher.iclientmessageformatter.aspx
• fooobar.com/questions/253414 / ...
• http://benpowell.org/supporting-the-ws-i-basic-profile-password-digest-in-a-wcf-client-proxy/
• http://social.msdn.microsoft.com/Forums/en/wcf/thread/0f09954e-3cef-45b3-a00d-f0f579a06bf7
• http://msdn.microsoft.com/en-us/library/system.servicemodel.dispatcher.idispatchmessageinspector.aspx
• http://msdn.microsoft.com/en-us/library/system.servicemodel.dispatcher.iclientmessageinspector.aspx
• http://msdn.microsoft.com/en-us/library/system.servicemodel.dispatcher.iclientmessageinspector.beforesendrequest.aspx
• http://yuzhangqi.itpub.net/post/37475/500654
• http://wcfpro.wordpress.com/category/wcf-extensions/
• http://social.technet.microsoft.com/wiki/contents/articles/1322.how-to-inspect-wcf-message-headers-using-iclientmessageinspector-en-us.aspx
• http://weblogs.asp.net/paolopia/archive/2007/08/23/writing-a-wcf-message-inspector.aspx
• http://wcfpro.wordpress.com/2011/03/29/iclientmessageinspector/
• fooobar.com/questions/1379802 / ...

You may need to work with OperationSelectors ...