CODEWITHSUNDEEP
asp.net-identity
Samjog
Samjog

Reputation: 31

ASPNET Identity 2.0 hashing algorithm

Which Hashing Algorithm aspnet identity 2.0 uses to hash password. Is it SHA1 or SHA256 ? Is it possible to change to SHA2 if it uses SHA1 ?

Upvotes: 0

Views: 879

Answers (2)

Matthew
Matthew

Reputation: 4339

Asp.net Identity 2.0 uses SHA1. It relies on Rfc2898DeriveBytes and does not have any SHA256 option--you'd have to write your own implementation.

Asp.net Identity 3.0 does have an SHA256 option though.

Upvotes: 0

Svekke
Svekke

Reputation: 1520

Microsoft is using PBKDF2 as their hashing algorithm in Identity 2.0.

Upvotes: 1

Related Questions