Re: FormsAuthentication.Encrypt - algorithm

From: Hernan de Lahitte (hernan_at_lagash.com)
Date: 12/28/04 

Date: Tue, 28 Dec 2004 10:20:51 -0300

Hi Gawel,

The encryption/decryption variables that Forms Authentication use are
configured in the <machineKey> entry (see machine.config file or your
web,config file as well).
The "decryptionKey" attribute drives the key management as well as the
symmetric algorithm used. The default values "Autogenerate" set the 3DES
algorithm and a random key is generated and stored in the Local Security
Authority (LSA). You may specify your own key if you change this attribute
with the hexadecimal encoded value of your random generated key. For further
info search for "machineKey" on the MSDN Library.

Hernan de Lahitte
http://weblogs.asp.net/hernandl
http://www.lagash.com/english/index.html

"An expert is one who knows more and more about less and less until he knows
absolutely everything about nothing".

"Gawel" <gawelek@moveitoutgazeta.pl> wrote in message
news:uA%236LaG7EHA.2016@TK2MSFTNGP15.phx.gbl...
> Hajo,
>
> I have a few questions about above method.
> 1. AFAIK it is symatric encryption, what kind of
> algorithm(name) is used in this method?
> 2. Where is key stored?
>
>
> thanks in advance for info
>
> Gawel