Encryption using triple DES in SAP

[Former Member]

Hi All,

We would like to implement Encryption using triple DES in our custom application developed using Webdynpro ABAP. Please let me know, if anyone has thoughts / ideas.

Regards,

Ramki.

[Former Member]

any update pls.

[mvoros]

Hi,

SAP offers limited crypto API. Basically, it offers only PKCS#7 format which can use 3DES as symmetric cipher but it also requires certificate. PKCS#7 was designed for signing and/or encrypting messages so you need to get public key of receiver of the message. You could implement DES in ABAP and then use it but crypto is really tricky thing. Just selecting proper mode for block cipher is pretty hard and key management is even harer. What exactly you want to achieve?

Cheers

[Former Member]

Hi Martin Voros,

We have build custom Webdynpro application for our business processes. Within, we're calling our internal legacy applcation using webservice with parameter as Employee ID, AD ID, Company Code etc along URL Post method.

All our legacy application are using 3DES decryption algorithm.

While posting a URL, we dont want to pass those parameter directly. Instead, we would like to encyrpt and embedded with URL.

For that purpose, we want to use 3DES encrption logic from Webdynpro ABAP front.

Please suggest.

Regards,

Ramki.

[mvoros]

OK, then one solution could be to use external OS commands. For example if you run your systems on Linux then you can use openssl to encrypt your data and then send it to legacy application.You could also use web service call over HTTPS to call service implemented in Java. There are many Java libraries which offer 3DES but there is nothing like that in ABAP. You could also rewrite 3DES to ABAP but as I said be careful. Crypto is tricky.

Cheers

[Wieprecht_Steff]

Check out note 662340 - will get you started with the steps for installing the SAPCRYPTOLIB,

which also offers 3DES (TRIPPLE DES)

http://www.saptechno.com/sap-notes.html?view=sapnote&id=662340