安全防护之加盐慢哈希加密

    class Program
    {
        static void Main(string[] args)
        {
            string pwd = "123456";
            string pwdMd5 = Md5Encryption(pwd);
            string salt = Guid.NewGuid().ToString("N");
            string pwdSlowHash = GetSlowHashPWD(pwdMd5, salt);
            Console.WriteLine("盐值：" + salt + " 加密后：" + pwdSlowHash);
            Console.ReadKey();

        }

        /// <summary>
        /// md5加密
        /// </summary>
        /// <param name="input"></param>
        /// <returns></returns>
        public static string Md5Encryption(string input)
        {
            byte[] result = Encoding.Default.GetBytes(input);   
            MD5 md5 = new MD5CryptoServiceProvider();
            byte[] output = md5.ComputeHash(result);
            return BitConverter.ToString(output).Replace("-", "");  
        }

        /// <summary>
        /// 慢哈希加密
        /// </summary>
        /// <param name="passwordMd5"></param>
        /// <param name="salt"></param>
        /// <returns></returns>
        internal static string GetSlowHashPWD(string passwordMd5, string salt)
        {
            int iterations = 1000;//密码慢哈希迭代次数
            byte[] saltBytes = Encoding.UTF8.GetBytes(salt);
            var pbkdf2 = new Rfc2898DeriveBytes(passwordMd5.ToUpper(), saltBytes, iterations);
            //用密码、salt 值和迭代次数返回伪随机密钥。 
            byte[] keyBytes = pbkdf2.GetBytes(16);
            return BitConverter.ToString(keyBytes).Replace("-", "");

        }
    }