When using the methods GenerateKey(), CreateEncryptor(Byte[], Byte[]), or CreateEncryptor() found in System.Security.Cryptography.Rijndael or System.Security.Cryptography.Aes class, how are the the keys generated?
- Does it follow the methods used in RFC-2898? I can only make an assumption that it does follow RFC-2898 since Rfc2898DeriveBytes is also a class in the System.Security.Cryptography namespace.
Both the GenerateIV Method and the GenerateKey Method just generate a sequence of random bytes of the required length. They do not use a KDF.