Michael Eddington (meddington@phed.org)

The .NET SecureString class can be hard to work and the only accessors for the data are through Marshaling calls.  There have been several instances were clients have wanted to add a SecureString into a state mechanism, or required some legacy support to older API’s.

This is a class that provides getting the secure string as an AES encrypted value and then also decrypting and returning a SecureString.  This is all done using p/invoke direct to the crypto api’s and the SecureString is therefor not leaked.

SecureStringHelper.cs