為EF連線字串加密的簡單範例

namespace BBDPWeb.Models

{

    public partial class BBDPEntities

    {

        public BBDPEntities(string cnStr) : base(cnStr)

        {

        }

    }

}

    //很陽春的加解密函式，改寫自http://goo.gl/sos1J

    //程式以示意為主，只適用小型字串處理，未包含參數檢核，防錯邏輯

    public class MyCipher

    {

        byte[] rgbKey = new byte[8];

        byte[] rgbIv = new byte[8];

        DESCryptoServiceProvider des = new DESCryptoServiceProvider();

        public MyCipher(string key)

        {

            var hash = MD5.Create().ComputeHash(Encoding.UTF8.GetBytes(key));

            Array.Copy(hash, 0, rgbKey, 0, 8);

            Array.Copy(hash, 8, rgbIv, 0, 8);

        }

        public string Encrypt(string rawString)

        {

            using (var ms = new MemoryStream())

            {

                using (var cs = new CryptoStream(ms, 

                    des.CreateEncryptor(rgbKey, rgbIv), CryptoStreamMode.Write))

                {

                    byte[] buff = Encoding.UTF8.GetBytes(rawString);

                    cs.Write(buff, 0, buff.Length);

                }

                return Convert.ToBase64String(ms.ToArray());

            }

        }

        public string Decrypt(string encString)

        {

            using (var ms = new MemoryStream(Convert.FromBase64String(encString)))

            {

                using (var cs = new CryptoStream(ms, 

                    des.CreateDecryptor(rgbKey, rgbIv), CryptoStreamMode.Read))

                {

                    using (var sr = new StreamReader(cs))

                    {

                        return sr.ReadToEnd();

                    }

                }

            }

        }

    }

        static MyCipher cipher = new MyCipher("加密金鑰");

        //使用統一的靜態函式建立DbContext物件，避免自行建構

        public static BBDPEntities CreateDbContext()

        {

            //設定檔之連線字串應加密

            var cnStr = ConfigurationManager.ConnectionStrings["BBDPEncCnnStr"].ConnectionString;

            //自動偵測，支援加密及未加密的連線字串，測時不加密，上線時再加密

            //在連線字串找到metadata字樣表示為加密字串

            if (!cnStr.Contains("metadata")) 

            {

                cnStr = cipher.Decrypt(cnStr);

            }

            var ent = new BBDPEntities(cnStr);

            return ent;

        }