Old Forums
Search:
Site structure
Version 5.x > Site structure > .NET AES security concern View modes: 
User avatar
Member
Member
jbeschen@sparknettech.com - 9/20/2010 7:37:56 AM
   
.NET AES security concern
I recently read there was a serious security problem in .NET's implementation of AES.

http://www.theinquirer.net/inquirer/news/1732956/security-researchers-destroy-microsoft-aspnet-security

There is a fix available from Microsoft but I want to make sure this wont cause any problems in the application before I implement it. Can anyone confirm this fix?

http://visualstudiomagazine.com/articles/2010/09/14/aspnet-security-hack.aspx

I also heard from one of our developers that this issue exists with SHA encryption as well but I havent confirmed that anywhere.
User avatar
Kentico Consulting
Kentico Consulting
kentico_borisp - 9/20/2010 8:07:01 AM
   
RE:.NET AES security concern
Hello,

This issue is already covered in the following thread. Could you please post additional questions, which aren't already answered, there?

Best regards,
Boris Pocatko

Top