What encryption method does the .NET FormsAuthentication.Encrypt() method use?

Question

Hi,

What encryption method does the .NET FormsAuthentication.Encrypt() method use?

There's no mention in the MSDN article:

http://msdn.microsoft.com/en-us/library/system.web.security.formsauthentication.encrypt.aspx

Thanks.

Answer 1

This is defined by the machineKey element:

<system.web>
    <machineKey validationKey="..." 
                decryptionKey="..." 
                validation="SHA1"
                decryption="AES" />
</system.web>