If a password makes use of a MD5CryptoServiceProvider hash for encryption,
will this hash be different if it is generated on a different server? For
example encrypting and decrupting on an application farm?
Jon Skeet [C# MVP] - 24 Mar 2008 21:07 GMT
> If a password makes use of a MD5CryptoServiceProvider hash for encryption,
> will this hash be different if it is generated on a different server? For
> example encrypting and decrupting on an application farm?
It shouldn't be, no. MD5 is a well-specified standard for how to create
a hash from a given input stream; it should give the same answer
regardless of OS, implementation language, data source type etc.

Signature
Jon Skeet - <skeet@pobox.com>
http://www.pobox.com/~skeet Blog: http://www.msmvps.com/jon.skeet
World class .NET training in the UK: http://iterativetraining.co.uk
Arne Vajhøj - 25 Mar 2008 01:55 GMT
> If a password makes use of a MD5CryptoServiceProvider hash for encryption,
> will this hash be different if it is generated on a different server? For
> example encrypting and decrupting on an application farm?
No.
But you should use a site specific or even better a username
specific salt in the hashing.
Oh - and use SHA-256 instead of MD5 as well.
Arne