Question

I want to compute salt for aspnet Membership.

  private static string CreateSalt(int size){

But what is the default size for the provider?(32 or 64?) I want to match it with sql server on my machine. Also could you please some algorithms?

<add name="AspNetSqlMembershipProvider"
     requiresQuestionAndAnswer="true"
     enablePasswordRetrieval="false"
     enablePasswordReset="true"
     connectionStringName="Membershiptest"
     minRequiredPasswordLength="8"
     minRequiredNonalphanumericCharacters="1"
     applicationName="test"
     type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"/>

I use SQL SERVER 2008 R2.I copy some salts here, so can we say their size are 24?

2Qjf2TYkDcp/wYKY1px7yg==

Ob+cmhSBCE4DFXKyF7ylAw==

65wVLQ1m+An6a9WGSv6SXA==

Tf0fdXoPw8FMr+KuhitvtQ==

Thanks.

Answer 1

That’s base64 so it’s actually 16 bytes not 24 bytes. The size is 16 or 128 depending on if you are wanting bytes or bits respectively.