---
id: object/codeunit/1279
type: object
title: Codeunit 1279 "Cryptography Management Impl."
summary: Codeunit 1279 "Cryptography Management Impl." in System Application (System.Security.Encryption). 61 public procedures. Present since at least BC23, still in BC30, changed in BC24-25, BC27-29.
tier: official
language: en
tags:
  - codeunit
  - system application
versions:
  introduced: null
  last_changed: "29"
  deprecated: null
review:
  state: derived
  by: null
  at: null
  flags: []
generated:
  at: "2026-10-11T00:31:51.816Z"
  pipeline: 0.2.0
  prompts: {}
  input_hash: a84edafd6fac1788a2fb61be53993ac810ffe22c365c21e326338b6bb5f30446
evidence:
  - kind: code
    url: https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/System%20Application/App/Cryptography%20Management/src/CryptographyManagementImpl.Codeunit.al
    title: src/System Application/App/Cryptography Management/src/CryptographyManagementImpl.Codeunit.al (releases/29.x)
    date: null
    commit: ea08af5ef2d6a9b5c5af4a029288abbe2c883220
    t: null
    quote: null
links:
  learn: []
  objects: []
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
  changes:
    - change/bcapps/9291
object_type: codeunit
object_id: 1279
name: Cryptography Management Impl.
namespace: System.Security.Encryption
app: System Application
extends: null
first_version: "23"
last_version: "30"
present_in:
  - "23"
  - "24"
  - "25"
  - "26"
  - "27"
  - "28"
  - "29"
  - "30"
changed_in:
  - "24"
  - "25"
  - "27"
  - "28"
  - "29"
source_major: "29"
obsolete: null
countries: []
ms_search_form_ids: []
counts:
  fields: 0
  procedures: 76
  events: 0
  subscribers: 0
relations:
  out: 0
  referenced_by: 0
  pages: 0
  extended_by: 0
  event_subscribers: 0
  calls: 3
  called_by: 3
  implements: 0
---

# Codeunit 1279 "Cryptography Management Impl."

> Codeunit 1279 "Cryptography Management Impl." in System Application (System.Security.Encryption). 61 public procedures. Present since at least BC23, still in BC30, changed in BC24-25, BC27-29.

System Application · System.Security.Encryption · BC23-30 · [source at ea08af5e](https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/System%20Application/App/Cryptography%20Management/src/CryptographyManagementImpl.Codeunit.al) · facts from BC29

## Properties

| Property | Value |
|---|---|
| Access | Internal |

## Procedures

- `Encrypt(InputString: Text[215]): Text`
- `Decrypt(EncryptedString: Text): Text`
- `ExportKey()`
- `ExportKeyAsStream(var TempBlob: Codeunit "Temp Blob"; Password: SecretText)`
- `ImportKey()`
- `ChangeKey()`
- `EnableEncryption(Silent: Boolean)`
- `DisableEncryption(Silent: Boolean)`
- `IsEncryptionEnabled(): Boolean`
- `IsEncryptionPossible(): Boolean`
- `GetEncryptionIsNotActivatedQst(): Text`
- `GenerateHash(InputString: Text; HashAlgorithmType: Option MD5,SHA1,SHA256,SHA384,SHA512): Text`
- `GenerateHash(InputString: SecretText; HashAlgorithmType: Option MD5,SHA1,SHA256,SHA384,SHA512): SecretText`
- `GenerateHashAsBase64String(InputString: Text; HashAlgorithmType: Option MD5,SHA1,SHA256,SHA384,SHA512): Text`
- `GenerateHashAsBase64String(InputString: SecretText; HashAlgorithmType: Option MD5,SHA1,SHA256,SHA384,SHA512): SecretText`
- `GenerateHash(InputString: Text; Key: SecretText; HashAlgorithmType: Option HMACMD5,HMACSHA1,HMACSHA256,HMACSHA384,HMACSHA512): Text`
- `GenerateHash(InputString: SecretText; Key: SecretText; HashAlgorithmType: Option HMACMD5,HMACSHA1,HMACSHA256,HMACSHA384,HMACSHA512): SecretText`
- `GenerateHashAsBase64String(InputString: Text; Key: SecretText; HashAlgorithmType: Option HMACMD5,HMACSHA1,HMACSHA256,HMACSHA384,HMACSHA512): Text`
- `GenerateHashAsBase64String(InputString: SecretText; Key: SecretText; HashAlgorithmType: Option HMACMD5,HMACSHA1,HMACSHA256,HMACSHA384,HMACSHA512): SecretText`
- `GenerateBase64KeyedHashAsBase64String(InputString: Text; Key: SecretText; HashAlgorithmType: Option HMACMD5,HMACSHA1,HMACSHA256,HMACSHA384,HMACSHA512): Text`
- `GenerateBase64KeyedHashAsBase64String(InputString: SecretText; Key: SecretText; HashAlgorithmType: Option HMACMD5,HMACSHA1,HMACSHA256,HMACSHA384,HMACSHA512): SecretText`
- `GenerateHash(DataInStream: InStream; HashAlgorithmType: Option MD5,SHA1,SHA256,SHA384,SHA512): Text`
- `GenerateBase64KeyedHash(InputString: Text; Key: SecretText; HashAlgorithmType: Option HMACMD5,HMACSHA1,HMACSHA256,HMACSHA384,HMACSHA512): Text`
- `GenerateBase64KeyedHash(InputString: SecretText; Key: SecretText; HashAlgorithmType: Option HMACMD5,HMACSHA1,HMACSHA256,HMACSHA384,HMACSHA512): SecretText`
- `SignData(InputString: Text; XmlString: SecretText; HashAlgorithm: Enum "Hash Algorithm"; SignatureOutStream: OutStream)`
- `SignData(InputString: SecretText; XmlString: SecretText; HashAlgorithm: Enum "Hash Algorithm"; SignatureOutStream: OutStream)`
- `SignData(InputString: SecretText; SignatureKey: Codeunit "Signature Key"; HashAlgorithm: Enum "Hash Algorithm"; SignatureOutStream: OutStream)`
- `SignData(InputString: Text; SignatureKey: Codeunit "Signature Key"; HashAlgorithm: Enum "Hash Algorithm"; SignatureOutStream: OutStream)`
- `SignData(DataInStream: InStream; XmlString: SecretText; HashAlgorithm: Enum "Hash Algorithm"; SignatureOutStream: OutStream)`
- `SignData(DataInStream: InStream; SignatureKey: Codeunit "Signature Key"; HashAlgorithm: Enum "Hash Algorithm"; SignatureOutStream: OutStream)`
- `SignData(InputString: Text; XmlString: SecretText; HashAlgorithm: Enum "Hash Algorithm"; RSASignaturePadding: Enum "RSA Signature Padding"; SignatureOutStream: OutStream)`
- `SignData(DataInStream: InStream; XmlString: SecretText; HashAlgorithm: Enum "Hash Algorithm"; RSASignaturePadding: Enum "RSA Signature Padding"; SignatureOutStream: OutStream)`
- `VerifyData(InputString: Text; XmlString: SecretText; HashAlgorithm: Enum "Hash Algorithm"; SignatureInStream: InStream): Boolean`
- `VerifyData(InputString: SecretText; XmlString: SecretText; HashAlgorithm: Enum "Hash Algorithm"; SignatureInStream: InStream): Boolean`
- `VerifyData(InputString: Text; SignatureKey: Codeunit "Signature Key"; HashAlgorithm: Enum "Hash Algorithm"; SignatureInStream: InStream): Boolean`
- `VerifyData(InputString: SecretText; SignatureKey: Codeunit "Signature Key"; HashAlgorithm: Enum "Hash Algorithm"; SignatureInStream: InStream): Boolean`
- `VerifyData(DataInStream: InStream; XmlString: SecretText; HashAlgorithm: Enum "Hash Algorithm"; SignatureInStream: InStream): Boolean`
- `VerifyData(DataInStream: InStream; SignatureKey: Codeunit "Signature Key"; HashAlgorithm: Enum "Hash Algorithm"; SignatureInStream: InStream): Boolean`
- `InitRijndaelProvider()`
- `InitRijndaelProvider(EncryptionKey: SecretText)`
- `InitRijndaelProvider(EncryptionKey: SecretText; BlockSize: Integer)`
- `InitRijndaelProvider(EncryptionKey: SecretText; BlockSize: Integer; CipherMode: Text)`
- `InitRijndaelProvider(EncryptionKey: SecretText; BlockSize: Integer; CipherMode: Text; PaddingMode: Text)`
- `SetBlockSize(BlockSize: Integer)`
- `SetCipherMode(CipherMode: Text)`
- `SetPaddingMode(PaddingMode: Text)`
- `SetEncryptionData(KeyAsBase64: SecretText; VectorAsBase64: Text)`
- `IsValidKeySize(KeySize: Integer): Boolean`
- `GetLegalKeySizeValues(var MinSize: Integer; var MaxSize: Integer; var SkipSize: Integer)`
- `GetLegalBlockSizeValues(var MinSize: Integer; var MaxSize: Integer; var SkipSize: Integer)`
- `GetEncryptionData(var KeyAsBase64: Text; var VectorAsBase64: Text)`
- `GetEncryptionData(var KeyAsBase64: SecretText; var VectorAsBase64: Text)`
- `EncryptRijndael(PlainText: Text): Text`
- `EncryptRijndaelSecret(PlainText: SecretText): SecretText`
- `EncryptBinaryDataRijndael(BinaryDataAsBase64: Text): Text`
- `EncryptBinaryDataRijndaelSecret(BinaryDataAsBase64: SecretText): SecretText`
- `DecryptRijndael(EncryptedText: SecretText): Text`
- `DecryptRijndaelSecret(EncryptedText: SecretText): SecretText`
- `DecryptBinaryDataRijndael(EncryptedBinaryDataAsBase64: SecretText): Text`
- `DecryptBinaryDataRijndaelSecret(EncryptedBinaryDataAsBase64: SecretText): SecretText`
- `HashRfc2898DeriveBytes(InputString: Text; Salt: Text; NoOfBytes: Integer; HashAlgorithmType: Option MD5,SHA1,SHA256,SHA384,SHA512): Text`

Plus 15 local procedures.

## Calls

From the extracted call graph of BC29 (graphify-al on the snapshot checkout): calls whose target is known from a declared type or an `Object::"Name"` argument. Interface dispatch and calls through events are not counted, so the list is not complete.

- [Codeunit 4100 "Temp Blob"](../codeunit/4100.md) (6 calls: `DownloadEncryptionFileFromStream → CreateInStream`, `GetEncryptionKeyAsStream → CreateOutStream`, `SignData → CreateInStream`, …)
- [Codeunit 9810 "Password Dialog Management"](../codeunit/9810.md) (4 calls: `ChangeKey → OpenSecretPasswordDialog`, `EnableEncryption → OpenSecretPasswordDialog`, `ExportKey → OpenSecretPasswordDialog`, …)
- [Codeunit 1266 "Cryptography Management"](../codeunit/1266.md) (2 calls: `CreateEncryptionKeys → OnBeforeEnableEncryptionOnPrem`, `DisableEncryption → OnBeforeDisableEncryptionOnPrem`)

## Called by

- [Codeunit 1258 "Rijndael Cryptography"](../codeunit/1258.md) (13 calls: `Decrypt → DecryptRijndael`, `DecryptBinaryData → DecryptBinaryDataRijndael`, `Encrypt → EncryptRijndael`, …)
- [Codeunit 1266 "Cryptography Management"](../codeunit/1266.md) (13 calls: `Decrypt → Decrypt`, `DisableEncryption → DisableEncryption`, `EnableEncryption → EnableEncryption`, …)
- [Codeunit 1378 "Rfc2898DeriveBytes"](../codeunit/1378.md) (1 call: `HashRfc2898DeriveBytes → HashRfc2898DeriveBytes`)

## Recent changes

- 2026-07-10 [#9291 Add [NonDebuggable] to Cryptography Management encrypt/decrypt procedures](../../changes/bcapps/9291.md) (main, BC30, fix)

## Across versions

- Present in: BC23-30
- Changed (declaration) in: BC24-25, BC27-29

Source: AL metadata extracted from the code (names, ids, signatures, properties); no code bodies (D10).

## Ask your agent

Procedure bodies are not stored here (D10). The call sections above are our own, per object, from the BC29 call graph. For a procedure body or the calls of one procedure, ask bc-code-atlas (external, by Stefan Maron, MIT; default corpus w1-28), which the bc-observatory plugin connects: `bcatlas_resolve_node(object_type: "codeunit", object_name: "Cryptography Management Impl.")`, then `bcatlas_get_procedure_body` or `bcatlas_get_neighbors` on the returned id.