Is there a built in function to hash passwords in .NET?

Question

I seen this question http://stackoverflow.com/questions/287517/encrypting-hashing-plain-text-passwords-in-database

and i am aware i shouldnt do md5("salt" + password); and i see an implementation in python for a solution.

Is there a .NET built in function with params i can use instead of writing my own?

Answer 1

this will probably do it:

http://msdn.microsoft.com/en-us/library/system.security.cryptography.hmacsha1.aspx

there is some sample c# code here:

http://www.obviex.com/samples/hash.aspx

Answer 2

I don't think there's a single function but you can do it in a few lines (here using SHA512, but there are other options):

using (var sha = new SHA512CryptoServiceProvider())
{
    byte[] hashed = sha.ComputeHash(Encoding.Default.GetBytes(saltedPassword));
    string output = Convert.ToBase64String(hashed);
}

Make sure you use one of the Crypto... classes to ensure the more secure algorithm is used.

Answer 3

Check out FormsAuthentication.HashPasswordForStoringInConfigFile

string hashMD5 = FormsAuthentication.HashPasswordForStoringInConfigFile(Pass + Salt, "MD5");

string hashSHA1 = FormsAuthentication.HashPasswordForStoringInConfigFile(Pass + Salt, "SHA1");