Hello,

I have an application compiled under aspnet 1.1. when I run this under IIS
with asp.net 2.0, users cannot login. This is because the
GetHashCode()-function returns another value.

Is there a way to fix this?

thx!

I think you might want to consider using an actual cryptographic hash
function. GetHashCode is intended for making it easy to insert things in a
HashTable but it isn't intended for cryptographic purposes.

You should be using something like SHA1 for generating hashes for a logon
algorithm. SHA1 (or other crypto has algs) called the same way will return
the same value for the same inputs regardless of platform.

As to whether the underlying implementation of GetHashCode may have changed,
that may be true. I think I remember hearing something about that.
However, my understanding was that you were never supposed to depend on a
specific value being returned in the first place.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"FM" <FM (AT) discussions (DOT) microsoft.com> wrote

I think you might want to consider using an actual cryptographic hash
function. GetHashCode is intended for making it easy to insert things in a
HashTable but it isn't intended for cryptographic purposes.

You should be using something like SHA1 for generating hashes for a logon
algorithm. SHA1 (or other crypto has algs) called the same way will return
the same value for the same inputs regardless of platform.

As to whether the underlying implementation of GetHashCode may have changed,
that may be true. I think I remember hearing something about that.
However, my understanding was that you were never supposed to depend on a
specific value being returned in the first place.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"FM" <FM (AT) discussions (DOT) microsoft.com> wrote