Keyczar dotnet

Implmemented in C# 4 to match up with the Java/Python/C++ Keyczar standard features and will interoperate with them by default. Uses BouncyCastle as backend for most encryption.

• Keyczar-dotnet: http://jbtule.github.io/keyczar-dotnet
• Official keyczar site: http://keyczar.org

Usage

KeyczarTool.exe provides the primary mechanism for creating and managing keysets. Calling KeyczarTool.exe from the commandline without flags will display usage.

See Wiki for more info.

Dependencies

• .net 4.0 or mono v2.10

Keyczar.dll

• BouncyCastle 1.8.0 or later
• DotNetZip 1.10 later
• Newtonsoft.Json 4.5.8 or later

KeyczarTool.exe

• ManyConsole 0.4.2.8 or later
• NDesk.Options 0.2.1 or later

Source & Build

Source code can be obtained with

git clone --recursive https://github.com/jbtule/keyczar-dotnet.git

Source can be built with msbuild 15, Rider, Visual Studio for Mac 7.1, or Visual Studio 2017. More info about building, especially on mono can be found on the wiki.

Windows	Mac	Linux

Compatibility

• Should interoperate with java/python/c++ with standard api
• All unofficial/incompatible api changes are under the unofficial names space to be clear what is provided that won’t interoperate with java/python/c++.
• Unofficial algorithms included are AES-GCM (KeyType=C#_AES_AEAD) and RSA-PSS (KeyType=C#_RSA_SIGN_PRIV) use the unofficial flag on the KeyczarTool.
• VanillaSigner and VanillaVerifier are feature identical to java/python/c++ UnversionedSigner and UnversionVerifer
• The Functionality of java/python/c++ SessionEncrypter, SessionDecrypter, SignedSessionEncrypter, and SignedSessionDecrypter are provided by the C# SessionCrypter via constructor arguments.
• You can use the AppSetting keyczar.strict_dsa_verification if you don’t need java Keyczar compatiblity and need stricter verification of dsa sigs.

Contribute

Code contribution, reported issues or code reviews welcome! Pull requests are automatically built and tested with Travis CI and AppVeyor.