FIPS Compliant Encryption Out-EncryptedScript about powersploit HOT 3 CLOSED

Thanks for bringing this to my attention and sorry for the delay in responding. I'd be more comfortable sticking to an AES crypto algorithm. Not being familiar with FIPS compliance settings, do you know if the System.Security.Cryptography.AesManaged class would be an acceptable alternative or is that essentially the same thing?

Thanks,
Matt

from powersploit.

Matt,

I used System.Security.Cryptography.RijndaelManaged, however I'm sure the AESManaged would work as well.
You can test it by modifying this registry entry: HKLM\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy DWORD : Enabled 1
(http://blog.aggregatedintelligence.com/2007/10/fips-validated-cryptographic-algorithms.html)

AES is a FIPS compliant encryption according to this document: http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf

from powersploit.

AESManaged didn't work so I changed it to TripleDESCryptoServiceProvider. Thanks for the suggestion! In my testing, when I enabled FIPSAlgorithmPolicy, it broke git when I tried to commit. LOL.

I also cleaned up the script a bit. It still needs some refactoring though. That thing is ugly! ;) It was one of my first scripts though. Haha.

from powersploit.