Which built-in .NET cryptography algorithm is the most secure?

Question

Hi,

Which cryptography algorithm is the most secure that ships with .net?

Answer 1

As a direct answer: AES 256 Bit.

It's been beat on the most out of all the algorithms, and stands up well.

As a more involved answer: all the algorithms will work fine if you manage them well. Cyptography is more than the algorithm - it's about key storage, encryption mode, how you implement the call to the algorithm. It's akin to getting bullet proof walls on the outside of your house - but forgetting someone can fake your automatic garage door signal.

Answer 2

I'm somewhat partial to SHA-512. If 512 is a little excessive, the other members of the SHA-2 family might be helpful - SHA-256 and SHA-384 are both in the SHA-2 family. But AviewAnew's suggestion of AES 256 is good as well.

Answer 3

You cannot directly compare all types of cryptographic algorithms. That would be like comparing a sorting algorithm with a multiplication algorithm: they have different purposes. That being said, I would answer:

• Symmetric cipher: AES-256
• Asymmetric cipher: RSA with 4096 bit key (I believe that is the maximum in .NET) or ECDSA with 571 bit key (but that is only supported in .NET 3.5)
• Hash: SHA-512
• Message Authentication Code: HMAC with SHA-512

That being said, those are overkill for most applications, and you should do fine using AES-128, RSA with 2048 bit key, SHA-256 and HMAC with SHA-256.