Specifies the hashing algorithm that ASP.NET uses for forms authentication and for validating view state data, and for out-of-process session state identification.
Syntax
Remarks
ASP.NET uses a hash-based message authentication code (HMAC) to help detect whether data that is used for forms authentication or view state has been tampered with. The HMAC is generated when view state content is created, and the HMAC is checked on subsequent requests. The HMAC helps ASP.NET determine whether someone has changed data that is sent between the server and the client, but the data can be read by anyone as it travels through the Internet unless it is also encrypted. By default, view state is validated but not encrypted. For more information, see System.Web.UI.Page.ViewStateEncryptionMode and System.Web.UI.Page.RegisterRequiresViewStateEncryption.
The System.Web.Configuration.MachineKeyValidation enumeration lets you specify the algorithm that ASP.NET uses to create the HMAC. The default value is MachineKeyValidation.HMACSHA256. ASP.NET uses the value of the MachineKeySection.ValidationKey property with the selected algorithm to generate the HMAC.
Members
| Member Name | Description |
|---|---|
| AES |
Specifies that ASP.NET uses the AES (Rijndael) encryption algorithm. |
| MD5 |
Specifies that ASP.NET uses the Message Digest 5 (MD5) hashing algorithm. |
| SHA1 |
Specifies that ASP.NET uses the HMACSHA1 hash algorithm. |
| TripleDES |
Specifies that ASP.NET uses the TripleDES (3DES) encryption algorithm. |
Requirements
Assembly: System.Web (in System.Web.dll)
Assembly Versions: 2.0.0.0
Since: .NET 2.0