SSF Encryption Issue

[Former Member]

Hi All,

Our project is using web service as an interface between .NET application and SAP to send data(only from .NET to SAP). Application is encrypting sensitive data from .NET and sending to SAP over webservice.

Implementation Details:  .NET is using public key provided by SAP to encrypt data and, SAP decrypts data with private key using SSF mode decryption (Method: SSF_KRN_DEVELOPE, Algorithm:  AES-256CBC decryption). Provided public key to .NET (Geo-Trust signed) in the form of X509 certificate and SAP maintains the private key in their server.

Data Level Encryption: We are using Certificate shared by SAP uses RSA (2048 bit) and method is AES-256 CBC algorithm and hash algorithm. From .NET we have used 'RSACryptoServiceProvider' and 'AESManaged' algorithms to encrypt but SAP is unable to decrypt in the actual data.

Is there any method in .NET for the corresponding SSF_KRN_DEVELOPE SAP method?

Regards, Depp

[DominikKraemer]

Hello,

take a look at the report ZSSF_TEST_PSE mentioned in OSS 800240  - FAQ: SAP Cryptographic Library error analysis (App. Server

and test the encryption there. I do not know any other FM which could be used for decrpytion in ECC,

Regards, Dominik