I recently encountered an odd problem with RSACryptoServiceProvider.VerifyHash.
I have a web application using it for decryption. When users running the web service were doing so over our VPN it became very very slow. When they had no connection or a internet connection they were fine.
After much digging I found that every time RSACryptoServiceProvider.VerifyHash is called it makes an LDAP request to check MyMachineName\ASPNET.
This doesn’t happen with our WebDev (cassini based) servers as they run as the current user, and it is only really slow over the VPN, but it shouldn’t happen at all.
This seems wrong for a couple of reasons:
- Why is it checking the domain controller for a local machine user?
- Why does it care? The encryption/decryption works regardless.
Does anyone know why this occurs or how best to work around it?
From this KB it looks like a ‘wrinkle’ in the code that needs sorting:
http://support.microsoft.com/kb/948080