.NET Core Data Security : Hope is not a Strategy

on YouTube ↗52m

" summary

Hands-on rundown of .NET crypto primitives and how they combine: uses RNGCryptoServiceProvider for keys, SHA-256/HMAC for integrity, PBKDF2 (RFC2898) with 300k+ iterations for slow password hashes, symmetric AES (128/256) with a 16-byte IV and the new AES-GCM with 12-byte nonce producing an authentication tag, and asymmetric RSA (2048–4096 bits) for key transport and signing. Shows code patterns to encrypt data with AES, wrap the AES key with RSA, verify HMAC/tags, create digital signatures, and assemble a working hybrid scheme that detects tampering and supports non-repudiation.

AI-written summary · about

" chapters (16)

1. 0:00Intro
2. 1:26What This Talk Is
3. 3:25What We Will Cover
4. 5:15Examples of Cryptography
5. 6:10Random Numbers
6. 9:48Hashing-SHA Family
7. 11:14HashMessage Authentication Codes - HMAC
8. 12:41Secure Password Storage
9. 22:05Symmetric Encryption - AES
10. 24:30AES-GCM Mode (Galois Counter Mode)
11. 28:06Asymmetric Encryption - RSA
12. 32:26Digital Signatures
13. 36:20Quick Recap
14. 41:05Hybrid Encryption - Integrity (AES-CBC)
15. 43:48Hybrid Encryption - Signature
16. 46:56What We Have Covered

" related talks

• 48m.NET Data Security : Hope is not a StrategyStephen Haunts · NDC Sydney 2017
• 52m.NET Data Security : Hope is not a StrategyStephen Haunts · NDC Oslo 2016
• 54mASP.NET Core Meets Owasp Top 10Anders Abel · NDC Security 2022
• 01h 03mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0Brock Allen · NDC Minnesota 2019
• 52mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0Dominick Baier · NDC Copenhagen 2019
• 53mSecuring Web Applications and APIs with ASP.NET Core 2.2 and 3.0Dominick Baier, Brock Allen · NDC Porto 2019
• 39mA guided tour of ASP.NET core securityAnders Abel · Øredev 2016
• 01h 03mASP.NET Core Authentication - The Dirty DetailsChris Klug · NDC Copenhagen 2026