using System; using System.IO; using System.Security.Cryptography; using System.Text; using NzbDrone.Common.Extensions; using NzbDrone.Core.Configuration; namespace NzbDrone.Core.Security { public interface IProtectionService { string Protect(string plainText); string UnProtect(string plainText); } public class ProtectionService : IProtectionService { private readonly IConfigFileProvider _configService; public ProtectionService(IConfigFileProvider configService) { _configService = configService; } public string Protect(string text) { var key = Encoding.UTF8.GetBytes(_configService.ApiKey); using (var aesAlg = Aes.Create()) { using (var encryptor = aesAlg.CreateEncryptor(key, aesAlg.IV)) { using (var msEncrypt = new MemoryStream()) { using (var csEncrypt = new CryptoStream(msEncrypt, encryptor, CryptoStreamMode.Write)) using (var swEncrypt = new StreamWriter(csEncrypt)) { swEncrypt.Write(text); } var iv = aesAlg.IV; var decryptedContent = msEncrypt.ToArray(); var result = new byte[iv.Length + decryptedContent.Length]; Buffer.BlockCopy(iv, 0, result, 0, iv.Length); Buffer.BlockCopy(decryptedContent, 0, result, iv.Length, decryptedContent.Length); return Convert.ToBase64String(result); } } } } public string UnProtect(string value) { if (value.IsNullOrWhiteSpace()) { return value; } try { value = value.Replace(" ", "+"); var fullCipher = Convert.FromBase64String(value); var iv = new byte[16]; var cipher = new byte[fullCipher.Length - iv.Length]; Buffer.BlockCopy(fullCipher, 0, iv, 0, iv.Length); Buffer.BlockCopy(fullCipher, iv.Length, cipher, 0, fullCipher.Length - iv.Length); var key = Encoding.UTF8.GetBytes(_configService.ApiKey); using (var aesAlg = Aes.Create()) { using (var decryptor = aesAlg.CreateDecryptor(key, iv)) { string result; using (var msDecrypt = new MemoryStream(cipher)) { using (var csDecrypt = new CryptoStream(msDecrypt, decryptor, CryptoStreamMode.Read)) { using (var srDecrypt = new StreamReader(csDecrypt)) { result = srDecrypt.ReadToEnd(); } } } return result; } } } catch (Exception) { return string.Empty; } } } }