Search code examples
c#.netaesrijndael

.NET System.Security.Cryptography Key Derivation Question (AES/Rijndael)


When using the methods GenerateKey(), CreateEncryptor(Byte[], Byte[]), or CreateEncryptor() found in System.Security.Cryptography.Rijndael or System.Security.Cryptography.Aes class, how are the the keys generated?

  1. Does it follow the methods used in RFC-2898? I can only make an assumption that it does follow RFC-2898 since Rfc2898DeriveBytes is also a class in the System.Security.Cryptography namespace.

Solution

  • Both the GenerateIV Method and the GenerateKey Method just generate a sequence of random bytes of the required length. They do not use a KDF.