WebServiceBasicAuthentication password, how is it stored?

[Mateusz]

When i create report in standalone application with WebServiceDataSource as trdx file i can see section for Authentication with user and password

      <Authentication>
        <WebServiceBasicAuthentication Password="eYk0jBuZWWwHo1LHgtDHjA==" Username="user" />
      </Authentication>

what algorithm do you use to hash password? how it is save?

[Momchil]

Hi Mateusz,

The password you see in your report definition is a Base64 string which has been encrypted using an internal encryption algorithm prior to the Base64 serialization. Thus, if you were to deserialize the Base64 string, you would not see the actual password.

Still, for an additional security layer, you can provide an encrypted version of your password in the report definition and decrypt it inside your web service.

Best Regards,
Momchil
Progress Telerik

[Mateusz]

is this some standard "encryption algorithm" or just your own? Can you provide any information of it? Our clients need to know about it or we have to ensure them that this is safe.

[Momchil]

To encrypt the password, we use the standard System.Security.Cryptography.Aes class. You can find more information about it in the linked MSDN article.

I hope this answers your question.