Take the 2-minute tour ×
Programmers Stack Exchange is a question and answer site for professional programmers interested in conceptual questions about software development. It's 100% free, no registration required.

On a .Net web application, what are the differences between using System.Web.Security.MachineKey or RijndaelManaged? Which algorithm does the MachineKey class use under the hood?


share|improve this question
On problem with RijndaelManaged (and the rest of the System.Cryptography classes) is that it's hard to use them correctly. Most users don't handle IVs correctly or miss adding a proper MAC making them vulnerable to padding oracle based attacks. –  CodesInChaos May 11 '13 at 9:27
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.