PDA

View Full Version : Welcome!



Jeroen Steehouder
20-Aug-2018, 09:07 AM
Data Access Worldwide is proud to present the first official beta release of the DataFlex Security Library, available for DataFlex 18.2 and up.

With this library you can create and verify hashes, store passcodes securely, add 2-factor authentication to your web application, and use encryption. It provides access to some of today’s most popular and secure algorithms:


Generic hashes: MD2, MD4, MD5, SHA-1, SHA-2 (256, 384, 512), blake2b
Keyed hashes: HMAC-MD5, HMAC-SHA-1, HMAC-SHA-2 (256, 384, 512), HMAC-SHA512-256 (truncated SHA-512), blake2b
Secure passcode storage: PBKDF2-SHA-1, PBKDF2-SHA-256, scrypt, argon2i, argon2id
Symmetric encryption: AES-CBC
Authenticated encryption: AES-GCM
2FA: oATH TOTP/HOTP and FIDO U2F


The installer executable that you can download installs up to three library workspaces. The main library provides only a framework, which ensures that every security engine will be accessible using a single, easy to use API. This workspace also contains a manual (PDF) to help you get started. The additional libraries provide access to CNG (CryptoAPI Next Generation) and libsodium. CNG is a part of Windows itself. Libsodium requires distribution of the dll, as well as (potentially) the Microsoft Visual C++ Runtime 2017.

Support will be given in this forum and we also invite you to post comment and other enhancement suggestions.

You can download the library from our website (https://www.dataaccess.eu/resources/downloads/download-category/download-subcategory-842?dagapsg=90).

Note that this release is considered beta, because it has only had limited field testing.

Michael Mullan
20-Aug-2018, 09:14 AM
I saw your presentation at EDUC. Very Very awesome tool

I'm building a new web-app from scratch this week,a nd I fully intend to iclude this.

Thanks Jeroen and Data Access!

MM

Focus
20-Aug-2018, 09:28 AM
Does it support Triple DES (3DES) ?

Jeroen Steehouder
20-Aug-2018, 09:51 AM
No, it does not. 3DES is considered a weak cipher and should not be used anymore.

On the other hand, CNG seems to support it. If you have specific requirements for 3DES, it may not be too hard to add it to the library yourself.