Is Asp.net identity hashing Secured?
问题 I have referred the following sites for the Rijndael and Asp.net hashing implementations in the following url. Rijndael - How to generate Rijndael KEY and IV using a passphrase? Asp.net hashing - ASP.NET Identity default Password Hasher, how does it work and is it secure? In both the implementation, The following is used to get the random bytes for the password. RijnDael Rfc2898DeriveBytes pdb = new Rfc2898DeriveBytes(password, SALT); Asp.net Identity hashing Rfc2898DeriveBytes bytes = new