C# 如何防止用户和其他应用程序访问保存在其内容受仅密码流保护的文件中的数据？
因此，我正在创建一个业务管理系统，以便将项目文件保存在本地计算机上，但许多人可以访问计算机。为了让没有人可以直接打开文件并访问所有数据，我希望文件能够直接打开我的应用程序。为了做到这一点，我认为为了打开文件，将有一些恒定的密码，我将通过流，所以这是文件可以打开的唯一方式 这可能吗 为了在下面的代码中实现它，我应该更改什么C# 如何防止用户和其他应用程序访问保存在其内容受仅密码流保护的文件中的数据？,c#,file,security,encryption,stream,C#,File,Security,Encryption,Stream,因此，我正在创建一个业务管理系统，以便将项目文件保存在本地计算机上，但许多人可以访问计算机。为了让没有人可以直接打开文件并访问所有数据，我希望文件能够直接打开我的应用程序。为了做到这一点，我认为为了打开文件，将有一些恒定的密码，我将通过流，所以这是文件可以打开的唯一方式 这可能吗 为了在下面的代码中实现它，我应该更改什么 Stream SerializeStream=新文件流（项目名称，FileMode.Create，FileAccess.ReadWrite，FileShare.ReadWrit
Stream SerializeStream=新文件流（项目名称，FileMode.Create，FileAccess.ReadWrite，FileShare.ReadWrite）
using System;
using System.Security;
using System.Security.Cryptography;
using System.Text;
using ( StreamWriter writer = new StreamWriter(filename) )
{
string password = AskPassword();
writer.Write(Encrypt(Content, password));
}
using ( StreamReader reader = new StreamReader(filename) )
{
string password = AskPassword();
string content = Decrypt(reader.ReadToEnd(), password);
}
static public byte[] Encrypt(byte[] data, string password)
{
return Encrypt(data, password, DefaultCryptoSalt);
}
static public byte[] Decrypt(byte[] data, string password)
{
return Decrypt(data, password, DefaultCryptoSalt);
}
static public string Encrypt(string str, string password, byte[] salt)
{
if ( str.IsNullOrEmpty() ) return str;
PasswordDeriveBytes p = new PasswordDeriveBytes(password, salt);
var s = Encrypt(Encoding.Default.GetBytes(str), p.GetBytes(32), p.GetBytes(16));
return Convert.ToBase64String(s);
}
static public string Decrypt(string str, string password, byte[] salt)
{
if ( str.IsNullOrEmpty() ) return str;
PasswordDeriveBytes p = new PasswordDeriveBytes(password, salt);
var s = Decrypt(Convert.FromBase64String(str), p.GetBytes(32), p.GetBytes(16));
return Encoding.Default.GetString(s);
}
static public byte[] Encrypt(byte[] data, byte[] key, byte[] iv)
{
if ( data == null ) return data;
using ( MemoryStream m = new MemoryStream() )
{
var r = Rijndael.Create().CreateEncryptor(key, iv);
using ( CryptoStream c = new CryptoStream(m, r, CryptoStreamMode.Write) )
c.Write(data, 0, data.Length);
return m.ToArray();
}
}
static public byte[] Decrypt(byte[] data, byte[] key, byte[] iv)
{
if ( data == null ) return data;
using ( MemoryStream m = new MemoryStream() )
{
var r = Rijndael.Create().CreateDecryptor(key, iv);
using ( CryptoStream c = new CryptoStream(m, r, CryptoStreamMode.Write) )
c.Write(data, 0, data.Length);
return m.ToArray();
}
}
public string Password
{
get
{
lock ( locker )
{
if ( _Password.IsNullOrEmpty() ) return _Password;
var buf = Encoding.Default.GetBytes(_Password);
ProtectedMemory.Unprotect(buf, MemoryProtectionScope.SameProcess);
return Encoding.Default.GetString(Decrypt(buf, _SecureKey.ToString()));
}
}
set
{
lock ( locker )
{
if ( !MemorizePassword ) return;
CreateSecureKey();
if ( value.IsNullOrEmpty() ) _Password = value;
else
{
var buf = Encrypt(Encoding.Default.GetBytes(value), _SecureKey.ToString());
ProtectedMemory.Protect(buf, MemoryProtectionScope.SameProcess);
_Password = Encoding.Default.GetString(buf);
}
}
}
}
private void CreateSecureKey()
{
_SecureKey = new SecureString();
foreach ( char c in Convert.ToBase64String(CreateCryptoKey(64)) )
_SecureKey.AppendChar(c);
_SecureKey.MakeReadOnly();
}
static public byte[] CreateCryptoKey(int length)
{
if ( length < 1 ) length = 1;
byte[] key = new byte[length];
new RNGCryptoServiceProvider().GetBytes(key);
return key;
}
using System;
using System.IO;
using System.IO.Compression;
using System.Text;
static public string Compress(this string text)
{
if ( text.IsNullOrEmpty() ) return text;
return Convert.ToBase64String(Encoding.Default.GetBytes(text).Compress());
}
static public byte[] Compress(this byte[] buffer)
{
using ( MemoryStream ms = new MemoryStream() )
{
using ( GZipStream zip = new GZipStream(ms, CompressionMode.Compress, true) )
zip.Write(buffer, 0, buffer.Length);
ms.Position = 0;
byte[] compressed = new byte[ms.Length];
ms.Read(compressed, 0, compressed.Length);
byte[] gzBuffer = new byte[compressed.Length + 4];
System.Buffer.BlockCopy(compressed, 0, gzBuffer, 4, compressed.Length);
System.Buffer.BlockCopy(BitConverter.GetBytes(buffer.Length), 0, gzBuffer, 0, 4);
return gzBuffer;
}
}
static public string Decompress(this string text)
{
return Encoding.Default.GetString(Convert.FromBase64String(text).Decompress());
}
static public byte[] Decompress(this byte[] gzBuffer)
{
using ( MemoryStream ms = new MemoryStream() )
{
int msgLength = BitConverter.ToInt32(gzBuffer, 0);
ms.Write(gzBuffer, 4, gzBuffer.Length - 4);
byte[] buffer = new byte[msgLength];
ms.Position = 0;
using ( GZipStream zip = new GZipStream(ms, CompressionMode.Decompress) )
zip.Read(buffer, 0, buffer.Length);
return buffer;
}
}
下面是我个人核心库中的一些想法，用于保存/加载加密文件或对象和流
using System;
using System.Security;
using System.Security.Cryptography;
using System.Text;
using ( StreamWriter writer = new StreamWriter(filename) )
{
string password = AskPassword();
writer.Write(Encrypt(Content, password));
}
using ( StreamReader reader = new StreamReader(filename) )
{
string password = AskPassword();
string content = Decrypt(reader.ReadToEnd(), password);
}
static public byte[] Encrypt(byte[] data, string password)
{
return Encrypt(data, password, DefaultCryptoSalt);
}
static public byte[] Decrypt(byte[] data, string password)
{
return Decrypt(data, password, DefaultCryptoSalt);
}
static public string Encrypt(string str, string password, byte[] salt)
{
if ( str.IsNullOrEmpty() ) return str;
PasswordDeriveBytes p = new PasswordDeriveBytes(password, salt);
var s = Encrypt(Encoding.Default.GetBytes(str), p.GetBytes(32), p.GetBytes(16));
return Convert.ToBase64String(s);
}
static public string Decrypt(string str, string password, byte[] salt)
{
if ( str.IsNullOrEmpty() ) return str;
PasswordDeriveBytes p = new PasswordDeriveBytes(password, salt);
var s = Decrypt(Convert.FromBase64String(str), p.GetBytes(32), p.GetBytes(16));
return Encoding.Default.GetString(s);
}
static public byte[] Encrypt(byte[] data, byte[] key, byte[] iv)
{
if ( data == null ) return data;
using ( MemoryStream m = new MemoryStream() )
{
var r = Rijndael.Create().CreateEncryptor(key, iv);
using ( CryptoStream c = new CryptoStream(m, r, CryptoStreamMode.Write) )
c.Write(data, 0, data.Length);
return m.ToArray();
}
}
static public byte[] Decrypt(byte[] data, byte[] key, byte[] iv)
{
if ( data == null ) return data;
using ( MemoryStream m = new MemoryStream() )
{
var r = Rijndael.Create().CreateDecryptor(key, iv);
using ( CryptoStream c = new CryptoStream(m, r, CryptoStreamMode.Write) )
c.Write(data, 0, data.Length);
return m.ToArray();
}
}
public string Password
{
get
{
lock ( locker )
{
if ( _Password.IsNullOrEmpty() ) return _Password;
var buf = Encoding.Default.GetBytes(_Password);
ProtectedMemory.Unprotect(buf, MemoryProtectionScope.SameProcess);
return Encoding.Default.GetString(Decrypt(buf, _SecureKey.ToString()));
}
}
set
{
lock ( locker )
{
if ( !MemorizePassword ) return;
CreateSecureKey();
if ( value.IsNullOrEmpty() ) _Password = value;
else
{
var buf = Encrypt(Encoding.Default.GetBytes(value), _SecureKey.ToString());
ProtectedMemory.Protect(buf, MemoryProtectionScope.SameProcess);
_Password = Encoding.Default.GetString(buf);
}
}
}
}
private void CreateSecureKey()
{
_SecureKey = new SecureString();
foreach ( char c in Convert.ToBase64String(CreateCryptoKey(64)) )
_SecureKey.AppendChar(c);
_SecureKey.MakeReadOnly();
}
static public byte[] CreateCryptoKey(int length)
{
if ( length < 1 ) length = 1;
byte[] key = new byte[length];
new RNGCryptoServiceProvider().GetBytes(key);
return key;
}
using System;
using System.IO;
using System.IO.Compression;
using System.Text;
static public string Compress(this string text)
{
if ( text.IsNullOrEmpty() ) return text;
return Convert.ToBase64String(Encoding.Default.GetBytes(text).Compress());
}
static public byte[] Compress(this byte[] buffer)
{
using ( MemoryStream ms = new MemoryStream() )
{
using ( GZipStream zip = new GZipStream(ms, CompressionMode.Compress, true) )
zip.Write(buffer, 0, buffer.Length);
ms.Position = 0;
byte[] compressed = new byte[ms.Length];
ms.Read(compressed, 0, compressed.Length);
byte[] gzBuffer = new byte[compressed.Length + 4];
System.Buffer.BlockCopy(compressed, 0, gzBuffer, 4, compressed.Length);
System.Buffer.BlockCopy(BitConverter.GetBytes(buffer.Length), 0, gzBuffer, 0, 4);
return gzBuffer;
}
}
static public string Decompress(this string text)
{
return Encoding.Default.GetString(Convert.FromBase64String(text).Decompress());
}
static public byte[] Decompress(this byte[] gzBuffer)
{
using ( MemoryStream ms = new MemoryStream() )
{
int msgLength = BitConverter.ToInt32(gzBuffer, 0);
ms.Write(gzBuffer, 4, gzBuffer.Length - 4);
byte[] buffer = new byte[msgLength];
ms.Position = 0;
using ( GZipStream zip = new GZipStream(ms, CompressionMode.Decompress) )
zip.Read(buffer, 0, buffer.Length);
return buffer;
}
}
文件权限通常基于用户，而不是基于应用程序；您所描述的是不可能的-任何有权访问该文件的用户帐户的人或任何管理员都可以打开这些文件。您正在尝试创建数据库-使用现有数据库。例如，您可以将StreamWriter与Write（Encrypt（content））一起使用，也可以将StreamReader与Decrypt（ReadToEnd（））一起使用。在本例中，假设内容是字符串。您可以根据需要实现Encryp（）和Decrypt（），并管理登录/密码。或者任何与你想做的事情相匹配的流对象。@OlivierRogier-hmm。。。加密。我没想过。该文件来自类型
.bin.bin