G&D MultiPower-6-NT, Руководство по установке

Страница: 51 / 60

Controlling the central power supply via XML
G&D MultiPower-6-NT · 19
English
Notes on encrypting passwords
While the entire data stream is transmitted encrypted when transport encryption is acti-
vated, encryption with password encryption is limited exclusively to the passwords of
the user accounts in the XML requests.
A subset of the W3 standard XML encryption is used for encrypting passwords. The pass-
word is replaced by an <EncryptedData> container with the XML namespace "http://
www.w3.org/2001/04/xmlenc#" . In this container, the container <CipherData> is
expected, which in turn contains the container <CipherValue> :
The encrypted data block (
CipherValue
) consists of the combination of initialization vec-
tor and encrypted text with padding encoded in BASE64.
NOTE: When using XML requests, passwords can either be encrypted (recom-
mended) or sent to the device in plain text if password encryption is activated.
PASSWORD AS EMBEDDED ENCRYPTED TEXT
<?xml version=\"1.0\" encoding=\"utf-8\"?>
<root>
<logon>
<DviConsole>0x22222222</DviConsole>
<User>JohnDoe</User>
<Password>
<EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#">
<CipherData>
<CipherValue>B2Wmn52teOPvY31wq0l4nw==</CipherValue>
</CipherData>
</EncryptedData>
</Password>
</logon>
</root>