<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class="">Hi Pete,</div>
<div class=""><br class="">
</div>
<div class="">Would it not be better to create a small Java application that takes the encrypted content and returns the decrypted content (possibly passing in a file and creating a new file with the decrypted content?).</div>
<div class=""><br class="">
</div>
<div class="">You can also compile Java to a .Net DLL using (<a href="https://www.ikvm.net" class="">https://www.ikvm.net</a>), so you can call it directly without passing files backward/forward.</div>
<div class=""><br class="">
</div>
<div class="">Kind Regards</div>
<br class="">
<div class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; " class="">
Stephen Welsh</div>
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; " class="">
CTO</div>
<br class="Apple-interchange-newline" style="color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<span><img apple-inline="yes" id="8EB04A79-4CF5-43F0-A9EE-2298B69E735B" src="cid:CBBF0493-235C-43D2-A874-9FB3D95AF598@b2.unifiedfx.com" class=""></span>
</div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On 26 Sep 2017, at 15:38, Pete Brown <<a href="mailto:jpb@chykn.com" class="">jpb@chykn.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div id="divtagdefaultwrapper" dir="ltr" style="font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; font-size: 12pt; font-family: Calibri, Helvetica, sans-serif;" class="">
I could use some public input regarding the next release of the DRS Backup Decrypter. In a nutshell, the application will have to be online in order to decrypt backup sets from newer UCOS versions.
<div class=""><br class="">
</div>
<div class="">Last year Cisco started patching DRS with a new algorithm (<span class="">PBEWithHmacSHA1AndDESede</span>) to encrypt the random backup passwords. I haven't been able to find a .NET implementation of this algorithm. The only workaround I've
come up with is to have the DRS Backup Decrypter make a call to a Java webservice that can perform the decryption.</div>
<div class=""><br class="">
</div>
<div class="">The problems with this approach are pretty obvious. Aside from having to be online, the encrypted cluster security password and 'EncryptKey' from a backup set will need to be submitted to a web service that I've written for decryption. I can
publish a public copy of this webservice, but for those behind corporate proxies (myself included), the code could be made available to run the service within their own networks. In that case the DRS Backup Decrypter would be pointed to the internal copy
of the webservice.</div>
<div class=""><br class="">
</div>
<div class="">I personally detest utilities that can't operate offline, but it's the only workaround I can come up with at this point. So my question is this - would anyone actually use it given the webservice dependency?</div>
</div>
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">_______________________________________________</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">cisco-voip
mailing list</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<a href="mailto:cisco-voip@puck.nether.net" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">cisco-voip@puck.nether.net</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://puck.nether.net/mailman/listinfo/cisco-voip</a></div>
</blockquote>
</div>
<br class="">
</body>
</html>