using System.Security.Cryptography;
using System.Text;
public static class SimpleConfigProtector
{
    // 加密字符串
    public static string Encrypt(string plainText)
    {
        byte[] plainBytes = Encoding.UTF8.GetBytes(plainText);
        byte[] encryptedBytes = ProtectedData.Protect(
            plainBytes, 
            entropy: null, // 可選的附加熵值，增加安全性
            scope: DataProtectionScope.CurrentUser // 或 LocalMachine
        );
        return Convert.ToBase64String(encryptedBytes);
    }
    // 解密字符串
    public static string Decrypt(string encryptedText)
    {
        byte[] encryptedBytes = Convert.FromBase64String(encryptedText);
        byte[] plainBytes = ProtectedData.Unprotect(
            encryptedBytes,
            entropy: null,
            scope: DataProtectionScope.CurrentUser
        );
        return Encoding.UTF8.GetString(plainBytes);
    }
}

{
  "ConnectionStrings": {
    "DefaultConnection": "Server=localhost;Database=MyDB;User=sa;Password=MyPass123;"
  },
  "ApiKey": "abc123def456"
}

{
  "ConnectionStrings": {
    "DefaultConnection": "AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAAA0IAAAAAAA... (加密文本)"
  },
  "ApiKey": "AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAAA0IAAAAAAA..."
}

public class AppSettings
{
    private readonly IConfiguration _configuration;
    public AppSettings(IConfiguration configuration)
    {
        _configuration = configuration;
    }
    public string GetConnectionString()
    {
        var encrypted = _configuration.GetConnectionString("DefaultConnection");
        return SimpleConfigProtector.Decrypt(encrypted);
    }
    public string GetApiKey()
    {
        var encrypted = _configuration["ApiKey"];
        return SimpleConfigProtector.Decrypt(encrypted);
    }
}

// ConfigEncryptor.cs
class Program
{
    static void Main(string[] args)
    {
        Console.WriteLine("=== 配置文件加密工具 ===");
        Console.Write("輸入要加密的文本: ");
        string plainText = Console.ReadLine();
        string encrypted = SimpleConfigProtector.Encrypt(plainText);
        Console.WriteLine($"加密結(jié)果: {encrypted}");
        Console.Write("是否測試解密? (y/n): ");
        if (Console.ReadKey().Key == ConsoleKey.Y)
        {
            string decrypted = SimpleConfigProtector.Decrypt(encrypted);
            Console.WriteLine($"\n解密結(jié)果: {decrypted}");
        }
    }
}

// 啟動時檢查并加密配置
if (!IsEncrypted(configValue))
{
    string encrypted = SimpleConfigProtector.Encrypt(configValue);
    // 更新配置文件（謹慎操作）
}

public static class CertificateProtector
{
    public static string EncryptWithCertificate(string plainText, X509Certificate2 cert)
    {
        using RSA rsa = cert.GetRSAPublicKey();
        byte[] plainBytes = Encoding.UTF8.GetBytes(plainText);
        byte[] encryptedBytes = rsa.Encrypt(plainBytes, RSAEncryptionPadding.OaepSHA256);
        return Convert.ToBase64String(encryptedBytes);
    }
    public static string DecryptWithCertificate(string encryptedText, X509Certificate2 cert)
    {
        using RSA rsa = cert.GetRSAPrivateKey();
        byte[] encryptedBytes = Convert.FromBase64String(encryptedText);
        byte[] plainBytes = rsa.Decrypt(encryptedBytes, RSAEncryptionPadding.OaepSHA256);
        return Encoding.UTF8.GetString(plainBytes);
    }
}