ASP.NET Roles and Membership - Migrating SHA1 to SHA2

Amjad Akhtar 1

Hi,

I have a ASP.NET web forms application that was originally developed in .NET 2.0 but was migrated to .NET4.7.2(just the framework) , its still using ASP.NET 2.0 roles and membership authentication scheme with SHA1 hashing algorithm.

I am recently being tasked to upgrade SHA1 hashing algorithm to SHA2 , and i assume it should be a relatively simple task other than asking existing users to reauthenticate their credentials under SHA2 hash.

Can someone share some articles or codebase for me to kick start this effort?

Thanks,
Amjad

AgaveJoe 26,191 Reputation points

2022-12-07T14:33:42.217+00:00

Googled

Found

https://devblogs.microsoft.com/dotnet/hash-passwords-with-asp-net-membership-providers/
Lan Huang-MSFT 25,471 Reputation points Microsoft Vendor

2022-12-08T06:58:59.35+00:00

Hi @Amjad Akhtar ,
Hope the following documents can help you.
https://techcommunity.microsoft.com/t5/ask-the-directory-services-team/migrating-your-certification-authority-hashing-algorithm-from/ba-p/400300
https://learn.microsoft.com/en-us/aspnet/identity/overview/migrations/migrating-an-existing-website-from-sql-membership-to-aspnet-identity
https://learn.microsoft.com/en-us/dotnet/api/system.security.cryptography.sha256?redirectedfrom=MSDN&view=net-7.0

Best regards,
Lan Huang