Take the 2-minute tour ×
Programmers Stack Exchange is a question and answer site for professional programmers interested in conceptual questions about software development. It's 100% free, no registration required.

On a .Net web application, what are the differences between using System.Web.Security.MachineKey or RijndaelManaged? Which algorithm does the MachineKey class use under the hood?

Thanks

share|improve this question
1  
On problem with RijndaelManaged (and the rest of the System.Cryptography classes) is that it's hard to use them correctly. Most users don't handle IVs correctly or miss adding a proper MAC making them vulnerable to padding oracle based attacks. –  CodesInChaos May 11 '13 at 9:27
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.