What's new in cryptography?

An automatic benefit of using .NET Core 3.0 or later is that algorithms for hashing, hash-based message authentication code (HMAC), random number generation, asymmetric signature generation and processing, and RSA encryption have been rewritten to use Span<T> so they achieve better performance. For example, Rfc2898DeriveBytes is about 15% faster.

Some enhancements have been made to the cryptography APIs that are useful in advanced scenarios, including:

• Signing and verifying of CMS/PKCS #7 messages.
• Enable X509Certificate.GetCertHash and X509Certificate.GetCertHashString to get certificate thumbprint values using algorithms other than SHA-1.
• The CryptographicOperations class with useful methods like ZeroMemory to securely clear memory.
• RandomNumberGenerator has a Fill method that will fill a span with random values and doesn't require you to manage an IDisposable resource.
• APIs to read, validate, and...