Secure your DataFlex Applications
What is the DataFlex Security Library?
Adding good security measures to your projects can be difficult, and technological progress will force you to stay up to date. The DataFlex Security Library makes it a lot easier to secure your DataFlex applications.
With the DataFlex Security Library attached to your application workspace you can create and verify hashes, store passcodes securely, add 2-factor authentication to your web application and use encryption. The library provides access to some of today’s most popular and secure algorithms.
The installer executable installs up to three library workspaces:
- The main library provides a robust framework that, via a single, easy to use API, allows the use of every security engine with DataFlex applications. This workspace also contains a manual (PDF) to help you get started.
- A library that provides access to CNG (CryptoAPI Next Generation). CNG is part of Windows itself.
- A library that provides access to libsodium. Libsodium requires distribution of the dll, as well as (potentially) installation of the MS C++ Runtime 2017.
The current version of the DataFlex Security Library supports the following algorithms:
• Generic hashes: MD2, MD4, MD5, SHA-1, SHA-2 (256, 384, 512), blake2b
• Keyed hashes: HMAC-MD5, HMAC-SHA-1, HMAC-SHA-2 (256, 384, 512), HMAC-SHA512-256 (truncated SHA-512), blake2b
• Secure passcode storage: PBKDF2-SHA-1, PBKDF2-SHA-256, scrypt, argon2i, argon2id
• Symmetric encryption: AES-CBC
• Authenticated encryption: AES-GCM
• 2FA: oATH TOTP/HOTP and FIDO U2F
Where can I get the DataFlex Security Library?
The DataFlex Security Library is freely available:
Download the DataFlex Security Library
Questions or need support?
There’s a Security the Basics course available in the DataFlex Learning Center. It explains the DataFlex Security Library and gives more useful tips about securing your DataFlex Application. Click here to go to the Security Course on the DataFlex Learning Center.
Support for the DataFlex Security Library is given via the support forums.