Which of the .NET included hashing algorithms are suitable for password hashing?

后端 未结 3 1915
失恋的感觉
失恋的感觉 2020-12-05 08:29

The password leak of LinkedIn proved how important it is to securely hash your passwords. However, even hashing passwords with a salt is not secure with the \'normal\' hashi

3条回答
  •  不知归路
    2020-12-05 08:51

    I think it's not really a meaningful Class name, but I do think it is included in the .NET framework. According to multiple sources, Rfc2898DeriveBytes is actually a PBKDF2 implementation. MSDN says so as well.

    See Why do I need to use the Rfc2898DeriveBytes class (in .NET) instead of directly using the password as a key or IV? and PBKDF2 implementation in C# with Rfc2898DeriveBytes

    for example.

提交回复
热议问题