dotnet-cryptography

Modern .NET cryptography covering hashing (SHA-256/384/512), symmetric encryption (AES-GCM), asymmetric cryptography (RSA, ECDSA), key derivation (PBKDF2, Argon2), and post-quantum algorithms (ML-KEM, ML-DSA, SLH-DSA) for .NET 10+. Includes TFM-aware guidance: what's available on net10.0 vs fallback strategies for net8.0/net9.0.

Scope

• Algorithm selection and correct usage of System.Security.Cryptography APIs
• Hashing for integrity (SHA-256/384/512)
• Symmetric encryption (AES-GCM)
• Asymmetric cryptography (RSA, ECDSA)
• Key derivation (PBKDF2, Argon2)
• Post-quantum cryptography (ML-KEM, ML-DSA, SLH-DSA) for .NET 10+
• Deprecated algorithm warnings

Out of scope