What's new in cryptography

An automatic benefit of using .NET Core 3.0 is that algorithms for hashing, HMAC, random number generation, asymmetric signature generation and processing, and RSA encryption have been rewritten to use Span<T> so they achieve better performance. For example, Rfc2898DeriveBytes is about 15% faster.

Some enhancements have been made to the cryptography APIs that are useful in advanced scenarios, including:

• Signing and verifying of CMS/PKCS #7 messages.
• Enable X509Certificate.GetCertHash and X509Certificate.GetCertHashString to get certificate thumbprint values using algorithms other than SHA-1.
• The CryptographicOperations class with useful methods like ZeroMemory to securely clear memory.
• RandomNumberGenerator has a Fill method that will fill a span with random values and doesn't require you to manage an IDisposable resource.
• APIs to read, validate, and create RFC 3161 TimestampToken values.
• Elliptic-Curve...