From the course: Security in ASP.NET Core

Unlock this course with a free trial

Join today to access over 24,800 courses taught by industry experts.

Encryption fundamentals

Encryption fundamentals - ASP.NET Tutorial

From the course: Security in ASP.NET Core

Encryption fundamentals

- [Instructor] In this chapter, we will cover different aspects about storing secrets. How can we properly remember things like connection strings or passwords for services in our application? How should our application store passwords from our users? And I'd like to start with a very, very brief overview of different encryption strategies. One kind of encryption is symmetric-key encryption. The idea is when I encrypt some data, I have an encryption key, that then usually is an input value for a mathematical process that turns our original into an encrypted version. And symmetric-key encryption means that we can use the key both for encrypting the data and for decrypting it. So we have to remember that key somewhere, we have to store it in our application. So once again, secret data that somehow needs to be retained. And the opposite approach is public-key encryption. The idea is we don't have just one key that then several parties need to know, but we have a set of keys: a public key…

Contents