Learn More
Resend Email
1
100110111
4y

Halp meh, plz... I have run across a problem and I have absolutely no idea how to go about solving it...

So basically I need to decrypt a TDES encrypted Azure service bus message. Can be done in a straightforward manner in .NET Framework solution with just your regular old System.Security.Cryptography namespace methods. As per MSDN docs you'd expect it to work in a .NET Core solution as well... No, no it doesn't. Getting an exception "Padding is invalid and cannot be removed". Narrowed the cause down to just something weird and undocumented happening due to Framework <> Core....

And before someone says 'just use .NET Framework then', let me clarify that it's not a possibility. While in production it could be viable, I'm not developing on a Windows machine...

How do I go about solving this issue? Any tips and pointers?

question

.net core

cryptography

.net framework
Favorite
Ranter
Comments
  • 0
    4y
    @jespersh I was hoping there could be some other way than to open an issue there and wait that someone gets around to fixing it...
  • 0
    4y
    Can't you decrypt without padding and then remove it 'manually'?
  • 0
    4y
    Can you use something like https://github.com/rbonestell/...

    I don't know a lot about encryption bit it appears this does the manual padding. Look at the transform function.
  • 0
    4y
    @sbiewald isn't that gonna f up the output? I mean I'm flying blind here, trying to learn as I go, but somehow I'd think that if it's encrypted with a certain padding mode, decrypting it with a different padding mode would not work... I might be wrong here, though
  • 0
    4y
    @demortes no luck :/
  • 0
    4y
    @100110111 Padding is applied in the following order:

    (plaintext) -> add padding -> encrypt -> (ciphertext) -> decrypt -> remove padding -> (plaintext)

    Thus decrypting without padding just gives you the plaintext with padding.

    Strictly speaking, padding is (mostly) independent from encryption, but for practicability reasons it is often included in the same place or classes.

    Try to decrypt it *without any padding at all* and look at the result.
  • 0
    4y
    Btw, solved it by switching to dotnet framework instead of core (got rid of the padding error, got a bad data error instead), and then actually acquiring the correct encryption key! There'd been a mixup and the service provider had accidentally given me a key that belonged somewhere else 🙄
  • 0
    4y
    @jespersh this time it was just a wrong encryption key that caused the bad data exception. Don't know if it was the cause for the invalid padding issue as well, since I got rid of that by just switching the target framework from dotnet core to dotnet 4.8
  • 1
    4y
    @100110111 That it was just the wrong key makes sense.

    Usually padding looks like this, that x bytes of value x are appended to the plaintext:
    e.g.
    data4444

    After the decryption, it may decrypt to this:
    Fa5h2bd79

    If the block size is 8 (as it is for DES/3DES), 9 is an invalid padding, thus an error is raised.
  • 0
    4y
    @sbiewald funny thing is that was my first instinct that maybe the key was wrong, but I was assured I had the right one. After pestering my contact for several days about it we finally double checked it - and of course I had a wrong one...
Related Rants
devRant © 2021 Hexical Labs LLC
Privacy Policy  |  Terms of Service
Add Comment