Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / Languages / C# / March 2008

Tip: Looking for answers? Try searching our database.

Does the MD5CryptoServiceProvider hash differ depending on where it is run?

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Bill Fuller - 24 Mar 2008 20:49 GMT
If a password makes use of a MD5CryptoServiceProvider hash for encryption,
will this hash be different if it is generated on a different server? For
example encrypting and decrupting on an application farm?
Jon Skeet [C# MVP] - 24 Mar 2008 21:07 GMT
> If a password makes use of a MD5CryptoServiceProvider hash for encryption,
> will this hash be different if it is generated on a different server? For
> example encrypting and decrupting on an application farm?

It shouldn't be, no. MD5 is a well-specified standard for how to create
a hash from a given input stream; it should give the same answer
regardless of OS, implementation language, data source type etc.

Signature

Jon Skeet - <skeet@pobox.com>
http://www.pobox.com/~skeet   Blog: http://www.msmvps.com/jon.skeet
World class .NET training in the UK: http://iterativetraining.co.uk

Arne Vajhøj - 25 Mar 2008 01:55 GMT
> If a password makes use of a MD5CryptoServiceProvider hash for encryption,
> will this hash be different if it is generated on a different server? For
> example encrypting and decrupting on an application farm?

No.

But you should use a site specific or even better a username
specific salt in the hashing.

Oh - and use SHA-256 instead of MD5 as well.

Arne

Rate this thread:







Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.