Does the MD5CryptoServiceProvider hash differ depending on where it is run?

[Bill Fuller]

If a password makes use of a MD5CryptoServiceProvider hash for encryption,
will this hash be different if it is generated on a different server? For
example encrypting and decrupting on an application farm?

 

[Jon Skeet [C# MVP]]

If a password makes use of a MD5CryptoServiceProvider hash for encryption,
will this hash be different if it is generated on a different server? For
example encrypting and decrupting on an application farm?

It shouldn't be, no. MD5 is a well-specified standard for how to create
a hash from a given input stream; it should give the same answer
regardless of OS, implementation language, data source type etc.

 

[Arne Vajhøj]

If a password makes use of a MD5CryptoServiceProvider hash for encryption,
will this hash be different if it is generated on a different server? For
example encrypting and decrupting on an application farm?

No.

But you should use a site specific or even better a username
specific salt in the hashing.

Oh - and use SHA-256 instead of MD5 as well.

Arne