module.psm1
|
<#
.SYNOPSIS Encrypts a SecureString with the specified encryption key .PARAMETER StringToEncrypt The string to be encrypted .PARAMETER SecureStringToEncrypt The string to be encrypted .PARAMETER EncryptionKey The encryption key #> Function New-EncryptedString { [OutputType([String])] [CmdletBinding(DefaultParameterSetName='plain')] param ( [Parameter(Mandatory=$true,ParameterSetName='plain',Position=0,ValueFromPipeline=$true)] [String] $StringToEncrypt, [Parameter(Mandatory=$true,ParameterSetName='secure',Position=0,ValueFromPipeline=$true)] [securestring] $SecureStringToEncrypt, [Parameter(Mandatory=$true,ParameterSetName='secure',Position=1)] [Parameter(Mandatory=$true,ParameterSetName='plain',Position=1)] [ValidateLength(16,32)] [String] $EncryptionKey ) if($PSCmdlet.ParameterSetName -eq 'plain') { $SecureStringToEncrypt=ConvertTo-SecureString -String $StringToEncrypt -AsPlainText -Force } $encryption_key=[System.Text.Encoding]::ASCII.GetBytes($EncryptionKey) $encrypted = ConvertFrom-SecureString -SecureString $SecureStringToEncrypt -Key $encryption_key return $encrypted } <# .SYNOPSIS Decrypts a SecureString that was encrypted with the specified key .PARAMETER StringToDecrypt The encrypted SecureString .PARAMETER EncryptionKey The encryption key .PARAMETER AsPlainText Returns the value as a plain string #> Function Get-EncryptedString { [CmdletBinding()] param ( [Parameter(Mandatory=$true,ValueFromPipeline=$true)] [String] $StringToDecrypt, [Parameter(Mandatory=$true)] [ValidateLength(16,32)] [String] $EncryptionKey, [Parameter()] [Switch] $AsPlainText ) $encryption_key=[System.Text.Encoding]::ASCII.GetBytes($EncryptionKey) $decrypted = ConvertTo-SecureString -String $StringToDecrypt -Key $encryption_key if($AsPlainText.IsPresent) { $decrypted=(New-Object PSCredential("anyuser",$decrypted)).GetNetworkCredential().Password } return $decrypted } <# .SYNOPSIS Generates a new encryption key for use with a SecureString .PARAMETER KeyLength The length of the key in bits 128,196, or 256 #> Function New-EncryptedStringKey { [OutputType([String])] [CmdletBinding()] param ( [ValidateSet(128,196,256)] [Parameter(Mandatory=$false)] [int] $KeyLength=128 ) $AvailChars=("1,2,3,4,5,6,7,8,9,0," + ` "a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z," + ` "-,+,=,A,B,C,D,E,F,G,H,I,J,K,L,M,N,O,P,Q,R,S,T,U,V,W,X,Y,Z," + "!,@,#,$,%,^,&,*,<,>,?,/,|,\").Split(',') $CharCount=$KeyLength/8 $EndChars=Get-Random -InputObject $AvailChars -Count $CharCount return ([String]::Join([String]::Empty,$EndChars)) } |