Can i relay on SslStream to encrypt all my sent&received data so i don’t have to hash the data or add any other encryption algorithm ?
Share
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
From MSDN:
So, on the surface, SSL’s function is to provide an encrypted tunnel between client and server. When properly implemented, SSL is considered to be “secure enough” for most operations. This means that you should not need an additional layer of security. However, it also depends upon your application.
I would also like to address another part of your question. “So I don’t have to hash the data” – if you hash the data, you are not encrypting it. You are performing a one-way operation that essentially destroys the original data when you send it. Hashes are typically used to see if two or more pieces of data are the same; they cannot be used for symmetric encryption/decryption.