.NET Data Security : Hope is not a Strategy
summary
Practical .NET recipe: use RNGCryptoServiceProvider to generate 32‑byte keys and 16‑byte IVs, hash with SHA‑256, authenticate with HMAC‑SHA256, store passwords with PBKDF2 (RFC2898) at tens of thousands of iterations (examples show 100k common; 500k ≈ 7s), encrypt payloads with AES‑256 (AesCryptoServiceProvider for FIPS) and protect session keys with RSA‑2048, then package RSA(encrypted session key)+IV+AES ciphertext+HMAC and add an RSA signature of the HMAC; sample code is provided and the hybrid scheme is shown end‑to‑end.
AI-written summary · about
chapters (17)
- 0:00Intro
- 1:01Supplemental Materials
- 3:31What This Talk Is
- 5:31What is Cryptography?
- 7:02Examples of Cryptography
- 8:09Random Numbers
- 12:32Hashing -MD5
- 15:24HashMessage Authentication Codes HMAC
- 15:59Message Authentication Codes - HMAC
- 17:38Secure Password Storage
- 28:02Symmetric Encryption - AES
- 31:47Asymmetric Encryption - RSA
- 36:34Digital Signatures
- 41:11Quick Recap
- 45:36Hybrid Encryption - Integrity
- 46:55Hybrid Encryption - Signature
- 48:56Further Reading and Support
related talks
48m.NET Data Security : Hope is not a Strategy
52m.NET Core Data Security : Hope is not a Strategy
30mSecuring the Connected World - Detangling Encryption and Decryption
32mEncryption - A Deeper Review
52mTales from the Crypt: A Cryptography Primer
47mPractical Security Foundations
01h 00mCS Fundamentals: Why SSL and SSH are Secure
57mProtecting Encryption Keys with Azure Key Vault