What RNG does the SQLMembershipProvider use to generate the SALT?

Question

I am using Membership Providers to manage the users. The provider we use is SqlMembershipProvider.

I need to know what is the RNG used to generate the SALT.

Through the following link https://referencesource.microsoft.com/#system.web/Security/SQLMembershipProvider.cs,e4fa4368d420c48a, I see that the function that generates the SALT is using the RNGCryptoServiceProvider class to generate the RNG.

But according to the microsoft documentation, that class is deprecated.

I need to confirm the RNG algorithm used by the SqlMembershipProvider.

Thank you so much

Answer 1

The SQLMembershipProvider is fairly old code (almost a decade since last update) as is most of the 4.8 framework. This code base is no longer updated and only security fixes are supplied.

for creating a salt, RNGCryptoServiceProvider perfectly fine. It should not be used for new code, or code you expect to migrate to .net core.