加密 ASP.NET 成员资格提供程序数据库中的密码
我有一个旧应用程序，它使用带有 SQL 后端的 ASP.NET 成员资格提供程序。数据库中的密码设置为清除。我想加密这些密码，同时保留各个密码。我怎样才能以编程方式完成这个任务？
我知道为了让 ASP.NET 识别更改，我需要更改数据库密码格式、密码盐和密码本身。我还需要更改 ASP.NET 配置中的密码格式以使用加密密码格式。
本质上，我需要生成一个盐，获取密码，对密码进行加密，但我对如何实际加密密码有点迷失。
I have a legacy application that uses the ASP.NET membership provider w/ SQL backend. The passwords in the database are set to clear. I would like to encrypt these passwords while preserving the individual passwords. How can I programatically go about accomplishing this?
I know that in order for ASP.NET to recognize the change, I'll need to change the database password format, password salt, and the password itself. I'll also need to change the password format in the ASP.NET configuration to use the encrypted password format.
Essentially, I would need to generate a salt, grab the password, apply an encryption to the password, but I'm a little lost on how to actually encrypt the password.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
当您说您希望通过保留单个密码来加密这些密码时，我假设您的意思是您不希望更改用户的密码。
我建议您对此进行测试运行（我相信您无论如何都会这样做）。
请参阅这篇文章，了解 SHA1 哈希工作原理的内部原理。
如何创建散列的 asp.net 会员资格提供程序手动设置密码？
创建一个小应用程序来连接到数据库并对所有密码进行哈希处理。
更新应用程序的配置以散列密码（删除“清除”指令，因为散列是默认的。
更新应用
When you say you want to encrypt these passwords by still preserving the individual passwords, I'm assuming you mean that you don't want to have the user's passwords be changed.
I would suggest you do a test run on this (I'm sure you would anyways).
Reference this post for the internals of how the SHA1 hashing works.
How to create a asp.net membership provider hashed password manually?
Create a small app to connect to the database and hash all the passwords.
Update the config for your application to Hash the passwords (remove the "Clear" directive as hashing is the default.
我建议你用盐把它们打散。
此网页包含您需要进行哈希处理的所有内容： http://www.obviex.com/samples/ hash.aspx
您必须迭代您的记录并更新它们。
然后更改代码中的密码检查逻辑。
I suggest you to hash them with a salt.
This web page contains everything you need to hash: http://www.obviex.com/samples/hash.aspx
You have to iterate trought your records and update them.
Then change the password checking logic in your code.