blowdart/aspnetcoreidentityencryption

How to do manual encryption for ASP.NET Core Identity 2.1. Not that you should be doing it.

aspnetcoreidentityencryption's Issues

Error in readme?

In the readme, the following is stated regarding the ILookupProtector:

As you can see each method takes two parameters: a keyId and the data to be protected. Where does the keyId come from? Your key ring. When encrypting data ASP.NET Core Identity will pass in the current key identifier, then prepend it to the data returned from your Protect method. When it comes to decrypt data Identity will extract the key identifier from the cipher text and pass it into Unprotect.

The part in bold does not seem to be the case. The Unprotect method takes the key as a parameter, similarly to the Protect method and does not extract it from the cipher text. I also guess doing so would break the Lookup functionality when keys were cycled.

Thanks for putting this together.

• Dan

Is it possible to use the DataProtection system with this?