Search code examples
asp.netlogin-controldiffie-hellman

Can we use Diffie-Hellman public key encrytion algorithm with asp.net login control?

I am trying to find out the internals of login control in asp.net. Does it uses some Public key encryption algorithm to exchange a key and then uses it for further communication as a symmetric key.

Also do we have our say in choosing the encryption algorithms like for ex i want to specifically use Diffie Hellman with login control. Is it possible and how can i achieve this?

Solution

  • Disclaimer: I'm no cryptographer...

    • The Login controls use ASP.Net Membership along with Forms Authentication by default.
    • You can create your own auth mechanism
    • The default hash algorithm used in ASP.net Membership is SHA1. Yes, you have a choice. I've had to use MD5 in a migration project (if memory serves from phpBB to ASP.net) more than a few years back...
    • (see disclaimer) Elliptic Curve Diffie-Hellman (ECDiffieHellman) info

    hth...