from Hacker News

Ask HN: Store Passwords Using Asp.net Core

by backslash_16 on 12/4/19, 11:03 PM with 0 comments

I want to safely and smartly do local user authentication for a web app written using C# with the platform/framework being Asp.Net Core MVC

I know tptacek is well regarded here on cryptography and security and found a blog post from his new security consulting company that suggests using SCrypt for hashing passwords. https://latacora.micro.blog/2018/04/03/cryptographic-right-answers.html

I found CryptSharpOfficial but it hasn't been updated since 2014 so that feels a little out of date. Is there an accepted package for SCrypt for .Net? Is there a better way of doing this?

I avoided using the included Microsoft local user authentication because the code is contained in NuGet packages and isn't actually available in my solution.