Feedback on 3rd party PGP encryption/decryption tool

Home Page Forums BizTalk 2004 – BizTalk 2010 Feedback on 3rd party PGP encryption/decryption tool

Viewing 2 reply threads
  • Author
    Posts
    • #20518

       Hi BizTalk Gurus:

      I was wondering if anyone had experience using the BizTalk 2004-2006 PGP Pipeline Component from Inter-Max Solutions, and would recommend this tool. Here’s the link to its description:

      http://www.inter-max.com/pgppipeline.htm

      Also, would it be more worthwhile to program our own PGP utility within a pipeline artifact?

      I would like your opinion on this subject…

      Thank you,

      Daniel.

       

    • #20525

      Daniel,

      On the basis of their web-site I would probably stay clear of the component, however looking around the web there doesn’t appear to be that many open-source C# implementations of OpenPGP and rolling your own looks like a bit of a challenge!

      I would suggest trying their component out for a while and see whether you like it – stick a couple of large messages through it and see what performance problems you have, if any.I’d also recommend asking them how they implement their PGP routines – have they written then from scratch, or are they wrapping around GnuPrivacyGuard (as in http://www.codeproject.com/KB/security/gnupgdotnet.aspx), are they using a third party library such as Bouncy Castle (http://www.bouncycastle.org/csharp/index.html), or are they using an off the shelf commercial component?

      On a slightly different note, this question has pricked my interest and I may look at developing a suite of pipeline components (possibly using the Bouncy Castle framework) for PGP to add to my Archive Component.

      Let me knowhow you get on.

      Rgds, Nick.

      • #20576

         Hi Nick,

        Thanks for your suggestions. After doing some further digging on the Internet, I came across this custom PGP pipeline component through this link:

        http://bajwork.blogspot.com/2007/08/pgp-pipeline-component.html

        It’s a wrapper C# class built on .NET framework 2.0 and using the Bouncy Castle framework. I think you and other folks will be interested in having a look at it. I am currently testing this module out in BizTalk 2006 R2 and its application looks promising for the processes that we are targeting it for in our business.

        Best,

        Daniel.

        • #21549

          Cant seem to decrypt correctly. Pipeline Fails because it finds Public Key where it expects a Private Key

           

          This is reiving me nuts

          • #21550

            [quote user="Anonymous"]

            Cant seem to decrypt correctly. Pipeline Fails because it finds Public Key where it expects a Private Key

             

            This is reiving me nuts

            [/quote]

             

            Hi,

                In your Receive Pipeline, after you place the PGP Pipeline Component in the Designer area in the Decode container, highlight that component, and check the Properties box for the following:

            1) ASCIIArmorFlag = False

            2) Extension = pgp

            3) IntegrityCheckFlag = False

            4) Operation = Decrypt

            5) Passphrase = your passphrase (note: this is your custom passphrase, remember that it is case-sensitive!)

            6) PrivateKeyFile = full path location of your private key file (note: your private key can be stored in the same file as your public key)

                With these settings, you should be able to use the pipeline component out of the box.

                Post back to this thread if you have further trouble using the component, or if my post answered your question…

                Regards,

                Daniel.

             

            • #21554

              You might have run into this before but thought I’d mention it here as well – on the Pro BizTalk 2006 book they have the code for a PGP encode and a PGP decode pipeline components based around the GNU Privacy Guard package available from http://www.gnupg.org

    • #21547

      JFYI: Intermax PGP Pipeline is based on pirated code of SecureBlackbox version 4. And their PGP key manager is a compiled sample of SecureBlackbox.

      • #21771

        It seems that I have no record of anyone buying our product in the last few months, and now I understand why.

        So how do you have this information?  No doubt from a bootlegged copy.

        Our products have gone through Microsoft VerTest certification and yes are fully legal.

        Yes some parts are re-writes, with some customizations.

        I am sorry to have to air this to this forum, and have avoided any intrusion til now.

        If someone has issues please email us and we will work hard to resolve them.

        We are a Certified Microsoft Partner and will give our customers the attention they deserve, if they are truly customers.

        Thank you.

         

         

Viewing 2 reply threads
  • The forum ‘BizTalk 2004 – BizTalk 2010’ is closed to new topics and replies.