EncryptionAlgorithm Enumeration |
The platform-provided encryption/hash algorithms appropriate for password storage.
A one-way has is more secure in protecting raw password values, but prevents decryption by the system.
The inability to decrypt is a key part of the security of a one-way hash, but does prohibit certain
useful actions such as re-encrypting a password without the user providing it or decrypting the password
for other use. For example, a one-way has would not be appropriate for storing a password required to
be passed to an external system via an API integration.
Namespace: NetQuarry.Security
Assembly: EAP.Core (in EAP.Core.dll) Version: 2.0.0.0 (4.6.8.0)
SyntaxMembers| Member name | Value | Description | |
|---|---|---|---|
| Original | 1 | The original platform encryption, 256-bit Advanced Encryption Standard (AES) encryption, also known as Rijndael encryption. This is the historical and default encryption. Uses NQCryptDecrypt to encrypt and decrypt. | |
| PBKDF2HashSHA1 | 2 | A one-way hash based using the Microsoft Rfc2898DeriveBytes implementation of PBKDF2 based on the HMACSHA1 hash with 10,000 iterations (making it computationally slow). Every hash is unique as a random seed is used. Uses PasswordHash to hash and verify against existing hashes. |
See Also