What encryption method does the .NET FormsAuthentication.Encrypt() method use?

Question

There's no mention in the MSDN article:

http://msdn.microsoft.com/en-us/library/system.web.security.formsauthentication.encrypt.aspx

Thanks.

Darin Dimitrov · Accepted Answer · 2009-10-29 09:55:49Z

18

This is defined by the machineKey element:

<system.web>
    <machineKey validationKey="..." 
                decryptionKey="..." 
                validation="SHA1"
                decryption="AES" />
</system.web>

answered Oct 29, 2009 at 9:55

Darin Dimitrov

1.0m276 gold badges3.3k silver badges3k bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Saravanan Over a year ago

What if my machine.config does not have a machine key as you said in you reply. then which algorithm does .net use as default?.

Saravanan Over a year ago

I find no machineKey setting in my machine and local server, any idea of what algorithm is used by default in this condition?.

hectorct Over a year ago

From the same page: it defaults to SHA1, which uses the HMACSHA1 algorithm

Collectives™ on Stack Overflow

What encryption method does the .NET FormsAuthentication.Encrypt() method use?

1 Answer 1

3 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related