Computing a hash with the managed SHA providers

1 Nov 2008 2:14 PM

Paul Speranza

I am wondering if the managed SHA providers use a machine key for computing a
hash like the FormsAuthentication.HashPasswordForStoringInConfigFile does.

I am pretty sure that I read somewhere that the forms authentication version
does.

Am I mistaken here? We are trying to get away from relying on the machine
key or whatever it uses and I prefer to use the SHA managed versions.

Anyway, I looked throught the SHA managed providers documentation and didn't
see it mentioned.

Thanks,
Paul Speranza

1 Nov 2008 9:45 PM

Stanimir Stoyanov

Hello Paul,

The crypto providers in System.Security generate hashes according to the
algorithm documentation and the data they are passed. They do not rely on a
machine key.

--
Stanimir Stoyanov
http://stoyanoff.info

Show quoteHide quote

"Paul Speranza" <PaulSpera***@discussions.microsoft.com> wrote in message
news:9448687D-6B00-4B3D-96A9-04BA566A4791@microsoft.com...
>I am wondering if the managed SHA providers use a machine key for computing
>a
> hash like the FormsAuthentication.HashPasswordForStoringInConfigFile does.
>
> I am pretty sure that I read somewhere that the forms authentication
> version
> does.
>
> Am I mistaken here? We are trying to get away from relying on the machine
> key or whatever it uses and I prefer to use the SHA managed versions.
>
> Anyway, I looked throught the SHA managed providers documentation and
> didn't
> see it mentioned.
>
> Thanks,
> Paul Speranza