Silverlight: username and password encryption for web service

Question

Encryption is not mine.

I am writing an application in Silverlight 3 that communicates with a web service to authenticate users. The web service will not necessarily be hosted under SSL. I am trying to find a way to reversibly encrypt the username and password before passing them, which does not rely on the key and salt hardcoded in the Silverlight assembly. It does not support RSA (or any asymmetric algorithm), so I can not use the public key from the server.

Are there any patterns for this kind of thing?

Answer 1

RSA , Silverlight 2 3. , , Silverlight 4. , RSA, , - , , .

... , , , , .

• Diffie-Hellman, , . , . . #.
• - , Diffie-Hellman, / . , , , , - . . (- , .) XOR . , AES, System.Security.Cryptography Silverlight BCL.

, . , .

Answer 2

RSA Silverlight http://www.riawebsoft.ru/Silverlight/Rsa/Test.aspx

Answer 3

I released the RSA library, which is compatible with .NET RSACryptoServiceProvider (both PKCS and OAEP) and complies with RSA standards. This is open source:

http://scrypt.codeplex.com