<keyAlgorithm> Element for <securityTokenManager>

  • Article

Specifies the cryptographic algorithm used by the specified XML-based security token to transform data.

<microsoft.web.services2> Element
  <security> Element
    <securityTokenManager> Element

<keyAlgorithm name />

Attributes and Elements

Attributes

Attribute Description

name

Required attribute.

When the security token uses symmetric keys, the name attribute must be one of the following key algorithms: AES128, AES192, AES256, TripleDES.

When the security token uses asymmetric keys, the name attribute must be either RSA15 or RSAOAEP, which refer to the RSA15 and RSA_OAEP cryptographic algorithms, respectively.

Child Elements

None

Parent Elements

Element Description

<securityTokenManager> Element

Specifies a user supplied custom security manager for an XML-based security token.

Remarks

Use the <keyAlgorithm> element to interoperate with other operating systems that use different cryptographic algorithms than WSE does for a specific security token. When you change the defaults, the sender and receiver must be configured to process keys generated for that security token type using the same key generation algorithm.

Example

The following code example specifies that symmetric session keys are generated using the AES192 algorithm for UsernameToken security tokens.

<configuration>
<microsoft.web.services>
    <security>
      <securityTokenManager
         type="Microsoft.Web.Services2.Security.Tokens.UsernameTokenManager, Microsoft.Web.Services2, Version=2.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" priority="1" group="0"
         xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" 
         qname="wsse:UsernameToken">
        <keyAlgorithm name="AES192"/>
      </securityTokenManager>
    </security>
  </microsoft.web.services>
</configuration>

See Also

Reference

<securityTokenManager> Element