Skip to content

Ask HN: Store Passwords Using Asp.net Core

1 pointbackslash_16discuss
On HN

I want to safely and smartly do local user authentication for a web app written using C# with the platform/framework being Asp.Net Core MVC

I know tptacek is well regarded here on cryptography and security and found a blog post from his new security consulting company that suggests using SCrypt for hashing passwords. https://latacora.micro.blog/2018/04/03/cryptographic-right-answers.html

I found CryptSharpOfficial but it hasn't been updated since 2014 so that feels a little out of date. Is there an accepted package for SCrypt for .Net? Is there a better way of doing this?

I avoided using the included Microsoft local user authentication because the code is contained in NuGet packages and isn't actually available in my solution.

Comments

No comments yet.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.