ASP.NET MVC Form encryption algorithm?

Question

What encryption algorithm is used in Form authentication when I use ASP.NET MVC 4?

The reason I'm asking is because I need to encrypt password on a phone and compare the hashed versions.

Community · Accepted Answer · 2021-01-18 12:38:11Z

2

Forms Authentication doesn't handle validating a users password. Typically that is handled by the MembershipProvider. Once you validate a users credentials, you can set an authentication cookie using Forms Authentication, which can then be validated by something like the AuthorizeAttribute.

You can find the algorithm and format that the default membership provider uses to hash passwords in this answer. You can also look at the implementation of SimpleMembershipProvider, which has an example of generating correct membership hashes.

As a side note, if you're looking for something stronger than the default membership provider method, StackOverflow uses PBKDF2 to derive hashes, which slows down computation and makes brute force attacks harder.

edited Jan 18, 2021 at 12:38

CommunityBot

11 silver badge

answered Jan 2, 2013 at 17:52

mfanto

14.5k6 gold badges53 silver badges61 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

ASP.NET MVC Form encryption algorithm?

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related