mirror of
https://github.com/freedbygrace/Invoke-SymmectricCryptography.git
synced 2026-07-26 11:48:15 +00:00
freedbygrace
622 lines
41 KiB
PowerShell
622 lines
41 KiB
PowerShell
## Microsoft Function Naming Convention: http://msdn.microsoft.com/en-us/library/ms714428(v=vs.85).aspx
|
|
|
|
#region Function Invoke-SymmectricCryptography
|
|
Function Invoke-SymmectricCryptography
|
|
{
|
|
<#
|
|
.SYNOPSIS
|
|
Performs value encryption or decryption using a specified algorithm.
|
|
|
|
.DESCRIPTION
|
|
A random key and initialization vector (IV) will be generated with each execution for maximum security.
|
|
|
|
This means that the resulting encrypted data will NEVER be the same, even if the value to be encrypted is!
|
|
|
|
This function is great for encrypting data that will NOT be transmitted over a network. In other words, data at rest.
|
|
|
|
If transmitting the data over a network is required, consider breaking the encrypted data, key, and initialization vector apart.
|
|
|
|
.PARAMETER Encrypt
|
|
Specifies that encryption will be performed.
|
|
|
|
.PARAMETER Decrypt
|
|
Specifies that decryption will be performed.
|
|
|
|
.PARAMETER Algorithm
|
|
Specifies the algorithm used for encryption or decryption.
|
|
|
|
.PARAMETER Data
|
|
Specifies the original string value that will be encrypted.
|
|
|
|
.PARAMETER EncryptedData
|
|
Specifies the previously encrypted string value that will be decrypted.
|
|
|
|
.PARAMETER Key
|
|
Specifies the decryption key that is required for decryption.
|
|
|
|
.PARAMETER InitializationVector
|
|
Specifies the initialization vector (IV) that is required for decryption.
|
|
|
|
.PARAMETER Export
|
|
Specifies that the encrypted data is to be exported.
|
|
|
|
.PARAMETER ExportFormat
|
|
Specifies the format that the encrypted data will be exported in.
|
|
|
|
.PARAMETER ExportPath
|
|
Specifies the path that the encrypted data will be exported to.
|
|
|
|
.PARAMETER ContinueOnError
|
|
Specifies that errors will be logged as warnings, but not considered fatal.
|
|
|
|
.EXAMPLE
|
|
$EncryptionResult = Invoke-SymmectricCryptography -Encrypt -Algorithm AES -Data 'SomeValueRequiringEncryption'
|
|
|
|
Write-Output -InputObject ($EncryptionResult)
|
|
|
|
.EXAMPLE
|
|
$DecryptionResult = Invoke-SymmectricCryptography -Decrypt -Algorithm AES -Data 'msDFP5hUQo8flkb+qnRSl+1yEaKEhl5Lr3LBfClXSMY=' -Key 'oc5cuCuOhw1qJvwr1iwHr9mOWXmLTMCgw1zlIOZDf78=' -InitializationVector 'zDpcPE2a4YWF/gFmGQoZhQ=='
|
|
|
|
Write-Output -InputObject ($DecryptionResult)
|
|
|
|
.EXAMPLE
|
|
$InvokeSymmectricCryptographyParameters = New-Object -TypeName 'System.Collections.Specialized.OrderedDictionary'
|
|
$InvokeSymmectricCryptographyParameters.Encrypt = $True
|
|
$InvokeSymmectricCryptographyParameters.Algorithm = 'AES'
|
|
$InvokeSymmectricCryptographyParameters.Data = New-Object -TypeName 'System.Collections.Generic.List[System.String]'
|
|
$InvokeSymmectricCryptographyParameters.Data.Add("AValueThatNeedsToBeEncrypted")
|
|
$InvokeSymmectricCryptographyParameters.Data.Add("AnotherValueThatNeedsToBeEncrypted")
|
|
$InvokeSymmectricCryptographyParameters.Export = $True
|
|
$InvokeSymmectricCryptographyParameters.ExportFormat = 'XML'
|
|
$InvokeSymmectricCryptographyParameters.ExportPath = "$($Env:UserProfile)\Downloads\EncryptedData.xml"
|
|
$InvokeSymmectricCryptographyParameters.ContinueOnError = $False
|
|
$InvokeSymmectricCryptographyParameters.Verbose = $True
|
|
|
|
$EncryptionResult = Invoke-SymmectricCryptography @InvokeSymmectricCryptographyParameters
|
|
|
|
Write-Output -InputObject ($EncryptionResult)
|
|
|
|
.EXAMPLE
|
|
$InvokeSymmectricCryptographyParameters = New-Object -TypeName 'System.Collections.Specialized.OrderedDictionary'
|
|
$InvokeSymmectricCryptographyParameters.Decrypt = $True
|
|
$InvokeSymmectricCryptographyParameters.Algorithm = 'AES'
|
|
$InvokeSymmectricCryptographyParameters.EncryptedData = 'msDFP5hUQo8flkb+qnRSl+1yEaKEhl5Lr3LBfClXSMY='
|
|
$InvokeSymmectricCryptographyParameters.Key = 'oc5cuCuOhw1qJvwr1iwHr9mOWXmLTMCgw1zlIOZDf78='
|
|
$InvokeSymmectricCryptographyParameters.InitializationVector = 'zDpcPE2a4YWF/gFmGQoZhQ=='
|
|
$InvokeSymmectricCryptographyParameters.ContinueOnError = $False
|
|
$InvokeSymmectricCryptographyParameters.Verbose = $True
|
|
|
|
$DecryptionResult = Invoke-SymmectricCryptography @InvokeSymmectricCryptographyParameters
|
|
|
|
Write-Output -InputObject ($DecryptionResult)
|
|
|
|
.EXAMPLE
|
|
$InvokeSymmectricCryptographyParameters = New-Object -TypeName 'System.Collections.Specialized.OrderedDictionary'
|
|
$InvokeSymmectricCryptographyParameters.Encrypt = $True
|
|
$InvokeSymmectricCryptographyParameters.Algorithm = 'AES'
|
|
$InvokeSymmectricCryptographyParameters.Data = "AValueThatNeedsToBeEncrypted"
|
|
$InvokeSymmectricCryptographyParameters.ContinueOnError = $False
|
|
$InvokeSymmectricCryptographyParameters.Verbose = $True
|
|
|
|
$EncryptionResult = Invoke-SymmectricCryptography @InvokeSymmectricCryptographyParameters
|
|
|
|
Write-Output -InputObject ($EncryptionResult)
|
|
|
|
$InvokeSymmectricCryptographyParameters = New-Object -TypeName 'System.Collections.Specialized.OrderedDictionary'
|
|
$InvokeSymmectricCryptographyParameters.Decrypt = $True
|
|
$InvokeSymmectricCryptographyParameters.Algorithm = $EncryptionResult.Algorithm
|
|
$InvokeSymmectricCryptographyParameters.EncryptedData = $EncryptionResult.Data
|
|
$InvokeSymmectricCryptographyParameters.Key = $EncryptionResult.Key
|
|
$InvokeSymmectricCryptographyParameters.InitializationVector = $EncryptionResult.InitializationVector
|
|
$InvokeSymmectricCryptographyParameters.ContinueOnError = $False
|
|
$InvokeSymmectricCryptographyParameters.Verbose = $True
|
|
|
|
$DecryptionResult = Invoke-SymmectricCryptography @InvokeSymmectricCryptographyParameters
|
|
|
|
Write-Output -InputObject ($DecryptionResult)
|
|
|
|
.NOTES
|
|
Any useful tidbits
|
|
|
|
.LINK
|
|
https://codeandkeep.com/PowerShell-Aes-Encryption/
|
|
|
|
.LINK
|
|
https://smsagent.blog/2022/09/23/encrypting-sensitive-data-for-transit-or-rest-with-powershell/
|
|
|
|
.LINK
|
|
https://stackoverflow.com/questions/67883498/powershell-password-encryption-decryption-with-key
|
|
|
|
.LINK
|
|
https://medium.com/@sumindaniro/encrypt-decrypt-data-with-powershell-4a1316a0834b
|
|
#>
|
|
|
|
[CmdletBinding(ConfirmImpact = 'Low', DefaultParameterSetName = 'Encryption', PositionalBinding = $True)]
|
|
|
|
Param
|
|
(
|
|
[Parameter(Mandatory=$True, ParameterSetName = 'Encryption')]
|
|
[Switch]$Encrypt,
|
|
|
|
[Parameter(Mandatory=$True, ParameterSetName = 'Decryption')]
|
|
[Switch]$Decrypt,
|
|
|
|
[Parameter(Mandatory=$True, ParameterSetName = 'Encryption')]
|
|
[Parameter(Mandatory=$True, ParameterSetName = 'Decryption')]
|
|
[ValidateNotNullOrEmpty()]
|
|
[ValidateSet('AES', 'DES', 'RC2', 'TripleDES')]
|
|
[String]$Algorithm,
|
|
|
|
[Parameter(Mandatory=$True, ParameterSetName = 'Encryption')]
|
|
[ValidateNotNullOrEmpty()]
|
|
[String[]]$Data,
|
|
|
|
[Parameter(Mandatory=$True, ParameterSetName = 'Decryption')]
|
|
[ValidateNotNullOrEmpty()]
|
|
[String]$EncryptedData,
|
|
|
|
[Parameter(Mandatory=$True, ParameterSetName = 'Decryption')]
|
|
[ValidateNotNullOrEmpty()]
|
|
[ValidatePattern('^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$')]
|
|
[String]$Key,
|
|
|
|
[Parameter(Mandatory=$True, ParameterSetName = 'Decryption')]
|
|
[ValidateNotNullOrEmpty()]
|
|
[ValidatePattern('^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{4})$')]
|
|
[String]$InitializationVector,
|
|
|
|
[Parameter(Mandatory=$False, ParameterSetName = 'Encryption')]
|
|
[Switch]$Export,
|
|
|
|
[Parameter(Mandatory=$False, ParameterSetName = 'Encryption')]
|
|
[ValidateNotNullOrEmpty()]
|
|
[ValidateSet('JSON', 'XML')]
|
|
[String]$ExportFormat,
|
|
|
|
[Parameter(Mandatory=$False, ParameterSetName = 'Encryption')]
|
|
[ValidateNotNullOrEmpty()]
|
|
[ValidateScript({$_ -imatch '(^([A-Z]\:|\\\\.*\\.*)\\.*\.(json|xml)$)'})]
|
|
[System.IO.FileInfo]$ExportPath,
|
|
|
|
[Parameter(Mandatory=$False)]
|
|
[Switch]$ContinueOnError
|
|
)
|
|
|
|
Begin
|
|
{
|
|
|
|
|
|
Try
|
|
{
|
|
$DateTimeLogFormat = 'dddd, MMMM dd, yyyy @ hh:mm:ss.FFF tt' ###Monday, January 01, 2019 @ 10:15:34.000 AM###
|
|
[ScriptBlock]$GetCurrentDateTimeLogFormat = {(Get-Date).ToString($DateTimeLogFormat)}
|
|
$DateTimeMessageFormat = 'MM/dd/yyyy HH:mm:ss.FFF' ###03/23/2022 11:12:48.347###
|
|
[ScriptBlock]$GetCurrentDateTimeMessageFormat = {(Get-Date).ToString($DateTimeMessageFormat)}
|
|
$DateFileFormat = 'yyyyMMdd' ###20190403###
|
|
[ScriptBlock]$GetCurrentDateFileFormat = {(Get-Date).ToString($DateFileFormat)}
|
|
$DateTimeFileFormat = 'yyyyMMdd_HHmmss' ###20190403_115354###
|
|
[ScriptBlock]$GetCurrentDateTimeFileFormat = {(Get-Date).ToString($DateTimeFileFormat)}
|
|
$DateTimeXMLFormat = 'yyyy-MM-ddTHH:mm:ss' ###2022-10-24T12:45:15###
|
|
[ScriptBlock]$GetCurrentDateTimeXMLFormat = {(Get-Date).ToString($DateTimeXMLFormat)}
|
|
$TextInfo = (Get-Culture).TextInfo
|
|
$LoggingDetails = New-Object -TypeName 'System.Collections.Specialized.OrderedDictionary'
|
|
$LoggingDetails.Add('LogMessage', $Null)
|
|
$LoggingDetails.Add('WarningMessage', $Null)
|
|
$LoggingDetails.Add('ErrorMessage', $Null)
|
|
$CommonParameterList = New-Object -TypeName 'System.Collections.Generic.List[String]'
|
|
$CommonParameterList.AddRange([System.Management.Automation.PSCmdlet]::CommonParameters)
|
|
$CommonParameterList.AddRange([System.Management.Automation.PSCmdlet]::OptionalCommonParameters)
|
|
|
|
[ScriptBlock]$ErrorHandlingDefinition = {
|
|
$ErrorMessageList = New-Object -TypeName 'System.Collections.Specialized.OrderedDictionary'
|
|
$ErrorMessageList.Add('Message', $_.Exception.Message)
|
|
$ErrorMessageList.Add('Category', $_.Exception.ErrorRecord.FullyQualifiedErrorID)
|
|
$ErrorMessageList.Add('Script', $_.InvocationInfo.ScriptName)
|
|
$ErrorMessageList.Add('LineNumber', $_.InvocationInfo.ScriptLineNumber)
|
|
$ErrorMessageList.Add('LinePosition', $_.InvocationInfo.OffsetInLine)
|
|
$ErrorMessageList.Add('Code', $_.InvocationInfo.Line.Trim())
|
|
|
|
ForEach ($ErrorMessage In $ErrorMessageList.GetEnumerator())
|
|
{
|
|
$LoggingDetails.ErrorMessage = "$($GetCurrentDateTimeMessageFormat.Invoke()) - ERROR: $($ErrorMessage.Key): $($ErrorMessage.Value)"
|
|
Write-Warning -Message ($LoggingDetails.ErrorMessage)
|
|
}
|
|
|
|
Switch (($ContinueOnError.IsPresent -eq $False) -or ($ContinueOnError -eq $False))
|
|
{
|
|
{($_ -eq $True)}
|
|
{
|
|
Throw
|
|
}
|
|
}
|
|
}
|
|
|
|
#Determine the date and time we executed the function
|
|
$FunctionStartTime = (Get-Date)
|
|
|
|
[String]$FunctionName = $MyInvocation.MyCommand
|
|
[System.IO.FileInfo]$InvokingScriptPath = $MyInvocation.PSCommandPath
|
|
[System.IO.DirectoryInfo]$InvokingScriptDirectory = $InvokingScriptPath.Directory.FullName
|
|
[System.IO.FileInfo]$FunctionPath = "$($InvokingScriptDirectory.FullName)\Functions\$($FunctionName).ps1"
|
|
[System.IO.DirectoryInfo]$FunctionDirectory = "$($FunctionPath.Directory.FullName)"
|
|
|
|
$LoggingDetails.LogMessage = "$($GetCurrentDateTimeMessageFormat.Invoke()) - Function `'$($FunctionName)`' is beginning. Please Wait..."
|
|
Write-Verbose -Message ($LoggingDetails.LogMessage)
|
|
|
|
#Define Default Action Preferences
|
|
$ErrorActionPreference = 'Stop'
|
|
|
|
[String[]]$AvailableScriptParameters = (Get-Command -Name ($FunctionName)).Parameters.GetEnumerator() | Where-Object {($_.Value.Name -inotin $CommonParameterList)} | ForEach-Object {"-$($_.Value.Name):$($_.Value.ParameterType.Name)"}
|
|
$LoggingDetails.LogMessage = "$($GetCurrentDateTimeMessageFormat.Invoke()) - Available Function Parameter(s) = $($AvailableScriptParameters -Join ', ')"
|
|
Write-Verbose -Message ($LoggingDetails.LogMessage)
|
|
|
|
[String[]]$SuppliedScriptParameters = $PSBoundParameters.GetEnumerator() | ForEach-Object {"-$($_.Key):$($_.Value.GetType().Name)"}
|
|
$LoggingDetails.LogMessage = "$($GetCurrentDateTimeMessageFormat.Invoke()) - Supplied Function Parameter(s) = $($SuppliedScriptParameters -Join ', ')"
|
|
Write-Verbose -Message ($LoggingDetails.LogMessage)
|
|
|
|
$LoggingDetails.LogMessage = "$($GetCurrentDateTimeMessageFormat.Invoke()) - Execution of $($FunctionName) began on $($FunctionStartTime.ToString($DateTimeLogFormat))"
|
|
Write-Verbose -Message ($LoggingDetails.LogMessage)
|
|
|
|
$LoggingDetails.LogMessage = "$($GetCurrentDateTimeMessageFormat.Invoke()) - Parameter Set Name: $($PSCmdlet.ParameterSetName)"
|
|
Write-Verbose -Message ($LoggingDetails.LogMessage)
|
|
|
|
#Create an object that will contain the functions output.
|
|
$OutputObjectProperties = New-Object -TypeName 'System.Collections.Specialized.OrderedDictionary'
|
|
|
|
#Determine the fully qualified Crypto Service Provider based on the specified algorithm
|
|
Switch ($Algorithm)
|
|
{
|
|
{($_ -iin @('AES'))}
|
|
{
|
|
$CryptoServiceProvider = 'System.Security.Cryptography.AESCryptoServiceProvider'
|
|
$CryptoServiceProviderName = 'AESCryptoServiceProvider'
|
|
}
|
|
|
|
{($_ -iin @('DES'))}
|
|
{
|
|
$CryptoServiceProvider = 'System.Security.Cryptography.DESCryptoServiceProvider'
|
|
$CryptoServiceProviderName = 'DESCryptoServiceProvider'
|
|
}
|
|
|
|
{($_ -iin @('RC2'))}
|
|
{
|
|
$CryptoServiceProvider = 'System.Security.Cryptography.RC2CryptoServiceProvider'
|
|
$CryptoServiceProviderName = 'RC2CryptoServiceProvider'
|
|
}
|
|
|
|
{($_ -iin @('TripleDES'))}
|
|
{
|
|
$CryptoServiceProvider = 'System.Security.Cryptography.TripleDESCryptoServiceProvider'
|
|
$CryptoServiceProviderName = 'TripleDESCryptoServiceProvider'
|
|
}
|
|
}
|
|
|
|
#Create an object that will contain that encrypted data objects
|
|
$EncryptedDataOutputObjectList = New-Object -TypeName 'System.Collections.Generic.List[System.Management.Automation.PSObject]'
|
|
}
|
|
Catch
|
|
{
|
|
$ErrorHandlingDefinition.Invoke()
|
|
}
|
|
Finally
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
Process
|
|
{
|
|
Try
|
|
{
|
|
$LoggingDetails.LogMessage = "$($GetCurrentDateTimeMessageFormat.Invoke()) - Attempting to symmetrically $($PSCmdlet.ParameterSetName.Replace('ion', '').ToLower()) the provided data using the `"$($Algorithm)`" cryptographic service provider. Please Wait..."
|
|
Write-Verbose -Message ($LoggingDetails.LogMessage)
|
|
|
|
Switch ($PSCmdlet.ParameterSetName)
|
|
{
|
|
{($_ -iin @('Encryption'))}
|
|
{
|
|
$OutputObjectProperties.Algorithm = $Algorithm
|
|
$OutputObjectProperties.CryptoServiceProvider = $CryptoServiceProvider
|
|
$OutputObjectProperties.CryptoServiceProviderName = $CryptoServiceProviderName
|
|
|
|
$DataObjectCount = ($Data | Measure-Object).Count
|
|
|
|
For ($DataObjectIndex = 0; $DataObjectIndex -lt $DataObjectCount; $DataObjectIndex++)
|
|
{
|
|
$DataObject = $Data[$DataObjectIndex]
|
|
|
|
$EncryptedDataOutputObjectProperties = New-Object -TypeName 'System.Collections.Specialized.OrderedDictionary'
|
|
$EncryptedDataOutputObjectProperties.Algorithm = $Algorithm
|
|
|
|
$CryptoServiceDictionary = New-Object -TypeName 'System.Collections.Specialized.OrderedDictionary'
|
|
$CryptoServiceDictionary.Encoder = [System.Text.Encoding]::UTF8
|
|
$CryptoServiceDictionary.Provider = New-Object -TypeName ($CryptoServiceProvider)
|
|
$CryptoServiceDictionary.Provider.Mode = [System.Security.Cryptography.CipherMode]::CBC
|
|
$CryptoServiceDictionary.Provider.Padding = [System.Security.Cryptography.PaddingMode]::PKCS7
|
|
$CryptoServiceDictionary.Provider.GenerateKey()
|
|
$CryptoServiceDictionary.Provider.GenerateIV()
|
|
|
|
$CryptoServiceDictionary.Encryptor = $CryptoServiceDictionary.Provider.CreateEncryptor($CryptoServiceDictionary.Provider.Key, $CryptoServiceDictionary.Provider.IV)
|
|
|
|
$CryptoServiceDictionary.DataBytes = $CryptoServiceDictionary.Encoder.GetBytes($DataObject)
|
|
|
|
$CryptoServiceDictionary.MemoryStream = New-Object -TypeName 'System.IO.MemoryStream'
|
|
|
|
$CryptoServiceDictionary.CryptoStreamMode = [System.Security.Cryptography.CryptoStreamMode]::Write
|
|
|
|
$CryptoServiceDictionary.CryptoStreamArgumentList = New-Object -TypeName 'System.Collections.Generic.List[Object]'
|
|
$CryptoServiceDictionary.CryptoStreamArgumentList.Add($CryptoServiceDictionary.MemoryStream)
|
|
$CryptoServiceDictionary.CryptoStreamArgumentList.Add($CryptoServiceDictionary.Encryptor)
|
|
$CryptoServiceDictionary.CryptoStreamArgumentList.Add($CryptoServiceDictionary.CryptoStreamMode)
|
|
|
|
$CryptoServiceDictionary.CryptoStream = New-Object -TypeName 'System.Security.Cryptography.CryptoStream' -ArgumentList ($CryptoServiceDictionary.CryptoStreamArgumentList.ToArray())
|
|
|
|
$CryptoServiceDictionary.StreamWriterArgumentList = New-Object -TypeName 'System.Collections.Generic.List[Object]'
|
|
$CryptoServiceDictionary.StreamWriterArgumentList.Add($CryptoServiceDictionary.CryptoStream)
|
|
|
|
$CryptoServiceDictionary.StreamWriter = New-Object -TypeName 'System.IO.StreamWriter' -ArgumentList ($CryptoServiceDictionary.StreamWriterArgumentList.ToArray())
|
|
$CryptoServiceDictionary.StreamWriter.Write($CryptoServiceDictionary.DataBytes, 0, $CryptoServiceDictionary.DataBytes.Length)
|
|
|
|
$Null = $CryptoServiceDictionary.StreamWriter.Close()
|
|
$Null = $CryptoServiceDictionary.CryptoStream.Close()
|
|
$Null = $CryptoServiceDictionary.MemoryStream.Close()
|
|
|
|
$EncryptedDataOutputObjectProperties.EncryptedData = [Convert]::ToBase64String($CryptoServiceDictionary.MemoryStream.ToArray())
|
|
$EncryptedDataOutputObjectProperties.Key = [Convert]::ToBase64String($CryptoServiceDictionary.Provider.Key)
|
|
$EncryptedDataOutputObjectProperties.InitializationVector = [Convert]::ToBase64String($CryptoServiceDictionary.Provider.IV)
|
|
$EncryptedDataOutputObjectProperties.DKIV = "$($EncryptedDataOutputObjectProperties.EncryptedData):$($EncryptedDataOutputObjectProperties.Key):$($EncryptedDataOutputObjectProperties.InitializationVector)"
|
|
|
|
$EncryptedDataOutputObject = New-Object -TypeName 'System.Management.Automation.PSObject' -Property ($EncryptedDataOutputObjectProperties)
|
|
|
|
$EncryptedDataOutputObjectList.Add($EncryptedDataOutputObject)
|
|
|
|
$Null = $CryptoServiceDictionary.Clear()
|
|
}
|
|
}
|
|
|
|
{($_ -iin @('Decryption'))}
|
|
{
|
|
$CryptoServiceDictionary = New-Object -TypeName 'System.Collections.Specialized.OrderedDictionary'
|
|
$CryptoServiceDictionary.Encoder = [System.Text.Encoding]::UTF8
|
|
$CryptoServiceDictionary.Provider = New-Object -TypeName ($CryptoServiceProvider)
|
|
$CryptoServiceDictionary.Provider.Mode = [System.Security.Cryptography.CipherMode]::CBC
|
|
$CryptoServiceDictionary.Provider.Padding = [System.Security.Cryptography.PaddingMode]::PKCS7
|
|
$CryptoServiceDictionary.Provider.Key = [System.Convert]::FromBase64String($Key)
|
|
$CryptoServiceDictionary.Provider.IV = [System.Convert]::FromBase64String($InitializationVector)
|
|
|
|
$CryptoServiceDictionary.Decryptor = $CryptoServiceDictionary.Provider.CreateDecryptor($CryptoServiceDictionary.Provider.Key, $CryptoServiceDictionary.Provider.IV)
|
|
|
|
$CryptoServiceDictionary.DataBytes = [System.Convert]::FromBase64String($EncryptedData)
|
|
|
|
$CryptoServiceDictionary.MemoryStreamArgumentList = New-Object -TypeName 'System.Collections.Generic.List[Object]'
|
|
$CryptoServiceDictionary.MemoryStreamArgumentList.Add($CryptoServiceDictionary.DataBytes)
|
|
$CryptoServiceDictionary.MemoryStreamArgumentList.Add(0)
|
|
$CryptoServiceDictionary.MemoryStreamArgumentList.Add($CryptoServiceDictionary.DataBytes.Length)
|
|
|
|
$CryptoServiceDictionary.MemoryStream = New-Object -TypeName 'System.IO.MemoryStream' -ArgumentList ($CryptoServiceDictionary.MemoryStreamArgumentList.ToArray())
|
|
|
|
$CryptoServiceDictionary.CryptoStreamMode = [System.Security.Cryptography.CryptoStreamMode]::Read
|
|
|
|
$CryptoServiceDictionary.CryptoStreamArgumentList = New-Object -TypeName 'System.Collections.Generic.List[Object]'
|
|
$CryptoServiceDictionary.CryptoStreamArgumentList.Add($CryptoServiceDictionary.MemoryStream)
|
|
$CryptoServiceDictionary.CryptoStreamArgumentList.Add($CryptoServiceDictionary.Decryptor)
|
|
$CryptoServiceDictionary.CryptoStreamArgumentList.Add($CryptoServiceDictionary.CryptoStreamMode)
|
|
|
|
$CryptoServiceDictionary.CryptoStream = New-Object -TypeName 'System.Security.Cryptography.CryptoStream' -ArgumentList ($CryptoServiceDictionary.CryptoStreamArgumentList.ToArray())
|
|
|
|
$CryptoServiceDictionary.StreamReaderArgumentList = New-Object -TypeName 'System.Collections.Generic.List[Object]'
|
|
$CryptoServiceDictionary.StreamReaderArgumentList.Add($CryptoServiceDictionary.CryptoStream)
|
|
|
|
$CryptoServiceDictionary.StreamReader = New-Object -TypeName 'System.IO.StreamReader' -ArgumentList ($CryptoServiceDictionary.StreamReaderArgumentList.ToArray())
|
|
|
|
[String]$DecryptedData = $CryptoServiceDictionary.StreamReader.ReadToEnd()
|
|
|
|
$OutputObjectProperties.DecryptedData = $DecryptedData
|
|
|
|
$Null = $CryptoServiceDictionary.MemoryStream.Close()
|
|
$Null = $CryptoServiceDictionary.CryptoStream.Close()
|
|
$Null = $CryptoServiceDictionary.MemoryStream.Close()
|
|
|
|
$Null = $CryptoServiceDictionary.Clear()
|
|
}
|
|
}
|
|
}
|
|
Catch
|
|
{
|
|
$ErrorHandlingDefinition.Invoke()
|
|
}
|
|
Finally
|
|
{
|
|
|
|
}
|
|
}
|
|
|
|
End
|
|
{
|
|
Try
|
|
{
|
|
#Determine the date and time the function completed execution
|
|
$FunctionEndTime = (Get-Date)
|
|
|
|
$LoggingDetails.LogMessage = "$($GetCurrentDateTimeMessageFormat.Invoke()) - Execution of $($FunctionName) ended on $($FunctionEndTime.ToString($DateTimeLogFormat))"
|
|
Write-Verbose -Message ($LoggingDetails.LogMessage)
|
|
|
|
#Log the total script execution time
|
|
$FunctionExecutionTimespan = New-TimeSpan -Start ($FunctionStartTime) -End ($FunctionEndTime)
|
|
|
|
$LoggingDetails.LogMessage = "$($GetCurrentDateTimeMessageFormat.Invoke()) - Function execution took $($FunctionExecutionTimespan.Hours.ToString()) hour(s), $($FunctionExecutionTimespan.Minutes.ToString()) minute(s), $($FunctionExecutionTimespan.Seconds.ToString()) second(s), and $($FunctionExecutionTimespan.Milliseconds.ToString()) millisecond(s)"
|
|
Write-Verbose -Message ($LoggingDetails.LogMessage)
|
|
|
|
$LoggingDetails.LogMessage = "$($GetCurrentDateTimeMessageFormat.Invoke()) - Function `'$($FunctionName)`' is completed."
|
|
Write-Verbose -Message ($LoggingDetails.LogMessage)
|
|
}
|
|
Catch
|
|
{
|
|
$ErrorHandlingDefinition.Invoke()
|
|
}
|
|
Finally
|
|
{
|
|
Switch ($PSCmdlet.ParameterSetName)
|
|
{
|
|
{($_ -iin @('Encryption'))}
|
|
{
|
|
$OutputObjectProperties.EncryptedDataObjectList = $EncryptedDataOutputObjectList
|
|
|
|
Switch ($Export.IsPresent)
|
|
{
|
|
{($_ -eq $True)}
|
|
{
|
|
Switch ($True)
|
|
{
|
|
{([String]::IsNullOrEmpty($ExportFormat) -eq $True) -or ([String]::IsNullOrWhiteSpace($ExportFormat) -eq $True)}
|
|
{
|
|
[String]$ExportFormat = 'JSON'
|
|
}
|
|
}
|
|
|
|
$OutputObjectProperties.ExportFormat = $ExportFormat
|
|
|
|
Switch ($ExportFormat)
|
|
{
|
|
{($_ -iin @('JSON'))}
|
|
{
|
|
$OutputObjectProperties.ExportContent = $OutputObjectProperties | ConvertTo-JSON -Depth 10 -Compress:$False
|
|
}
|
|
|
|
{($_ -iin @('XML'))}
|
|
{
|
|
$XMLWriterSettings = New-Object -TypeName 'System.XML.XMLWriterSettings'
|
|
$XMLWriterSettings.Indent = $True
|
|
$XMLWriterSettings.IndentChars = "`t" * 1
|
|
$XMLWriterSettings.Encoding = [System.Text.Encoding]::Default
|
|
$XMLWriterSettings.NewLineHandling = [System.XML.NewLineHandling]::None
|
|
$XMLWriterSettings.ConformanceLevel = [System.XML.ConformanceLevel]::Document
|
|
$XMLWriterSettings.OmitXmlDeclaration = $False
|
|
|
|
$XMLStringBuilder = New-Object -TypeName 'System.Text.StringBuilder'
|
|
|
|
$XMLWriter = [System.XML.XMLTextWriter]::Create($XMLStringBuilder, $XMLwritersettings)
|
|
|
|
[ScriptBlock]$AddXMLWriterNewLine = {$XMLWriter.WriteWhitespace(("`r`n" * 2))}
|
|
|
|
$Null = $XMLWriter.WriteStartDocument()
|
|
|
|
$Null = $AddXMLWriterNewLine.Invoke()
|
|
|
|
$Null = $XMLWriter.WriteStartElement('Settings')
|
|
|
|
$Null = $XMLWriter.WriteStartElement('Metadata')
|
|
|
|
$XMLWriter.WriteElementString('GeneratedDate', $GetCurrentDateTimeXMLFormat.InvokeReturnAsIs())
|
|
|
|
$Null = $XMLWriter.WriteEndElement()
|
|
|
|
$Null = $XMLWriter.WriteStartElement('Secrets')
|
|
|
|
ForEach ($OutputObjectProperty In $OutputObjectProperties.GetEnumerator())
|
|
{
|
|
Switch ($OutputObjectProperty.Key)
|
|
{
|
|
{($_ -iin @('Algorithm'))}
|
|
{
|
|
$XMLWriter.WriteAttributeString($OutputObjectProperty.Key, $OutputObjectProperty.Value)
|
|
}
|
|
}
|
|
}
|
|
|
|
ForEach ($EncryptedDataObject In $OutputObjectProperties.EncryptedDataObjectList)
|
|
{
|
|
$SecretID = [System.GUID]::NewGUID().ToString().ToUpper()
|
|
|
|
$Null = $XMLWriter.WriteStartElement('Secret')
|
|
|
|
$Null = $XMLWriter.WriteAttributeString('Enabled', $True)
|
|
$Null = $XMLWriter.WriteAttributeString('ID', $SecretID)
|
|
|
|
ForEach ($EncryptedDataObjectProperty In $EncryptedDataObject.PSObject.Properties)
|
|
{
|
|
Switch (($Null -ine $EncryptedDataObjectProperty.Value) -and ([String]::IsNullOrEmpty($EncryptedDataObjectProperty.Value) -eq $False) -and ([String]::IsNullOrWhiteSpace($EncryptedDataObjectProperty.Value) -eq $False))
|
|
{
|
|
{($_ -eq $True)}
|
|
{
|
|
Switch ($True)
|
|
{
|
|
{($EncryptedDataObjectProperty.Name -iin @('EncryptedData', 'Key', 'InitializationVector'))}
|
|
{
|
|
$Null = $XMLWriter.WriteStartElement($EncryptedDataObjectProperty.Name)
|
|
|
|
$XMLWriter.WriteCData($EncryptedDataObjectProperty.Value)
|
|
|
|
$Null = $XMLWriter.WriteEndElement()
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
$Null = $XMLWriter.WriteEndElement()
|
|
}
|
|
|
|
$Null = $XMLWriter.WriteEndElement()
|
|
$Null = $XMLWriter.WriteEndElement()
|
|
$Null = $XMLWriter.WriteEndDocument()
|
|
$Null = $XMLWriter.Flush()
|
|
$Null = $XMLWriter.Close()
|
|
|
|
$OutputObjectProperties.ExportContent = $XMLStringBuilder.ToString() -ireplace '(utf\-\d+)', 'utf-8'
|
|
}
|
|
}
|
|
|
|
Switch (([String]::IsNullOrEmpty($ExportPath) -eq $False) -and ([String]::IsNullOrEmpty($ExportPath) -eq $False))
|
|
{
|
|
{($_ -eq $True)}
|
|
{
|
|
$OutputObjectProperties.ExportPath = $ExportPath.FullName
|
|
|
|
Switch ([System.IO.Directory]::Exists($ExportPath.Directory.FullName))
|
|
{
|
|
{($_ -eq $False)}
|
|
{
|
|
$Null = [System.IO.Directory]::CreateDirectory($ExportPath.Directory.FullName)
|
|
}
|
|
}
|
|
|
|
$LoggingDetails.LogMessage = "$($GetCurrentDateTimeMessageFormat.Invoke()) - Attempting to export the encrypted contents for $($DataObjectCount) secret(s) in $($ExportFormat) format. Please Wait. [Path: $($ExportPath.FullName)]"
|
|
Write-Verbose -Message ($LoggingDetails.LogMessage)
|
|
|
|
$Null = [System.IO.File]::WriteAllText($ExportPath.FullName, $OutputObjectProperties.ExportContent, $XMLWriterSettings.Encoding)
|
|
}
|
|
|
|
Default
|
|
{
|
|
$OutputObjectProperties.ExportPath = $Null
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
Switch ($PSCmdlet.ParameterSetName)
|
|
{
|
|
{($_ -iin @('Encryption'))}
|
|
{
|
|
$OutputObject = New-Object -TypeName 'System.Management.Automation.PSObject' -Property ($OutputObjectProperties)
|
|
|
|
Write-Output -InputObject ($OutputObject)
|
|
}
|
|
|
|
{($_ -iin @('Decryption'))}
|
|
{
|
|
#$OutputObject = $DecryptedData
|
|
|
|
$OutputObject = New-Object -TypeName 'System.Management.Automation.PSObject' -Property ($OutputObjectProperties)
|
|
|
|
Write-Output -InputObject ($OutputObject)
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
#endregion
|