大家都知道,ce和mobile上有很多的安全策略，可能比较常用的有模块验证（CertifyModule）。
请教大家个问题，安全策略中的csp和ssp最大的差别是什么，都用来做什么？能不能举一个例子来说明它们的典型应用？
希望各位兄弟，各位大哥和大虾来讨论一下
----------------------------------------------
我的理解：
csp：主要用来实现加密/解密/以及密钥保存
ssp: 用来实现wince/mobile与外部进行通信如有线或者无线网络,在http通信中可能会用到
MSDN上找了下，是这个吗？
security support provider
(SSP) A dynamic-link library (DLL) that implements the SSPI by making one or more security packages available to applications. Each security package provides mappings between an application's SSPI function calls and an actual security model's functions. Security packages support security protocols such as Kerberos authentication and the Microsoft LAN Manager.
cryptographic service provider
(CSP) An independent software module that actually performs cryptography algorithms for authentication, encoding, and encryption.
引用: 引用 4 楼 aaa_tnt 的回复:
MSDN上找了下，是这个吗？
security support provider
(SSP) A dynamic-link library (DLL) that implements the SSPI by making one or more security packages available to applications. Each security package provides mappings between an application's SSPI function calls and an actual security model's functions. Security packages support security protocols such as Kerberos authentication and the Microsoft LAN Manager.
cryptographic service provider
(CSP) An independent software module that actually performs cryptography algorithms for authentication, encoding, and encryption.
对，ce和mobile的帮助文档中都有这段
太笼统了，想向一些真正用过这部分的人请教一下具体的使用案例之类的东西
依然谢谢了
京公网安备 11010802033920号
