Home/ Questions/Q 9321123
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-19T03:47:26+00:00

How do we find out what encryption MVC4 uses? I notice there is an

  • 0

How do we find out what encryption MVC4 uses? I notice there is an option for a SALT but this also seems not to be used in the WebSecurity() module.

I would like to know the standard used and if it is easily possible to upgrade to the latest SHA

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    According to the below link the Default Hashing Algorithm Is Now HMACSHA256:

    http://www.asp.net/whitepapers/aspnet4/breaking-changes

    Default Hashing Algorithm Is Now HMACSHA256

    ASP.NET uses both encryption and hashing algorithms to help secure data such as forms authentication cookies and view state. By default, ASP.NET 4 now uses the HMACSHA256 algorithm for hash operations on cookies and view state. Earlier versions of ASP.NET used the older HMACSHA1 algorithm.

    Your applications might be affected if you run mixed ASP.NET 2.0/ASP.NET 4 environments where data such as forms authentication cookies must work across.NET Framework versions. To configure an ASP.NET 4 Web application to use the older HMACSHA1 algorithm, add the following setting in the Web.config file:

    <machineKey validation="SHA1" />
    • 0