Other projects:
Inferno, CryptoRandom, TinyORM, FastGuid AesGcmStrict

Security Driven .NET

Practical security handbook for .NET developers.

Comments:

Essential to every .NET developer working on security controls: http://t.co/NelRXlQgIt
— Brice Williams (@bricex) May 1, 2014

Extremely *deep* (I've read an early version) new e-book "Security Driven .NET" http://t.co/ndFAt475wC #bookmarked
— Scott Hanselman (@shanselman) October 29, 2013

I had a look at an earlier revision of the book "Security Driven .NET". Very nice, now on the market: http://t.co/tC4LBSyA0d
— Troy Hunt (@troyhunt) October 28, 2013

Working my way through "Security Driven .NET" - really impressed - good detail, no space-filling waffle, good tips. - kudos @sdrapkin
— Marc Gravell (@marcgravell) November 9, 2013

1/2 through Security Driven .NET and loving it! More tech books should be this dense. Cut intro-outro, fluff; and provide quality content
— Tom Decreton (@TomDecreton) November 11, 2013

"Stan, Thanks for the fantastic book." [from reader's email]

Recommended Resource – Microsoft ASP.NET Team

Recommended Resource – OWASP .NET

Contents (70 pages):

Preface
- Who Is This Book For?
- Why Is This Book Relevant Today?
- What Makes This Book Different From Other ".NET Security" Books?
- Source Code Samples
Random Number Generators
- System.Random
- RNGCryptoServiceProvider
- Random Integers in Min-Max Range
FIPS Mode
Hash Functions
- Object.GetHashCode
- FNV-1a hash
- Hash Flooding
- FNV-1a with Entropy
- SHA-1 hash
- SipHash
- Modern Non-Cryptographic Hashes
- Cryptographic Hashes
HMAC
- HMAC in .NET
- Hash and HMAC Factories
Key Derivation
- PBKDF2
- HKDF
- PBKDF2 and HKDF together
- Salt
- Key Separation
Byte Array Comparison
- Direct Comparison
- AND Comparison
- XOR Comparison
- Double-HMAC Comparison
Binary Encodings
- Base64
- Base32
- Base16
Text Encodings
- UTF-32
- UTF-16
- UTF-8
- UTF-7
- UTF Comparison
- Safe Construction
- Serialization
Symmetric Encryption
- AES
- Key
- Cipher Mode
- Padding Mode
- Initialization Vector
Authenticated Encryption (AE)
- Key Derivation
- Primitive Choices
- Length Leaks
- Common Mistakes
ASP.NET Security
Session State
CSRF
Forms Authentication
- Membership
- Insider Threats
Credential Storage
Improving Forms Authentication
New ASP.NET Crypto Stack
ASP.NET CSRF API
Other ASP.NET Concerns
- Label & Literal
- Client-side PBKDF
Password Reset
Asymmetric (Public-Key) Cryptography
- RSA Key Management
- RSA Signatures
- RSA Key Exchange
- RSA Encryption
- Perfect Forward Secrecy
- Key Separation
Two-Factor Authentication (2FA)
- HOTP
- TOTP
Practicing What You Have Learned
- RavenDB Encryption
- MSDN Code Sample for Rfc2898DeriveBytes
- MSDN Code Sample for AES Encryption
Attributions

Source code:

Download .ZIP

sdrapkin