.NET Framework 4.8中Rfc2898DeriveBytes性能过慢问题咨询

结论：你的推测完全正确 #

.NET Framework 4.8中的Rfc2898DeriveBytes实现性能远低于.NET 8，核心原因是：

• .NET Framework的PBKDF2实现基于旧版加密库，未充分利用现代CPU的SIMD指令、硬件加速特性；
• .NET 5+（包括.NET 8）对密码学模块做了全面重构，改用更高效的底层实现，直接调用系统级优化的加密API，大幅提升了PBKDF2的运算速度。

不升级.NET版本/不使用第三方包的解决办法 #

在.NET Framework 4.8中，可通过P/Invoke直接调用Windows原生BCrypt API来实现高性能PBKDF2计算，绕开.NET Framework自带的低效实现。以下是完整示例代码：

using System;
using System.Runtime.InteropServices;
using System.Security.Cryptography;

public static class Pbkdf2Helper
{
    // 导入BCrypt相关API
    [DllImport("bcrypt.dll", CharSet = CharSet.Unicode)]
    private static extern int BCryptOpenAlgorithmProvider(out IntPtr phAlgorithm, string pszAlgId, string pszImplementation, uint dwFlags);

    [DllImport("bcrypt.dll")]
    private static extern int BCryptDeriveKeyPBKDF2(IntPtr hAlgorithm, byte[] pbPassword, int cbPassword, byte[] pbSalt, int cbSalt, uint cIterations, byte[] pbDerivedKey, int cbDerivedKey, uint dwFlags);

    [DllImport("bcrypt.dll")]
    private static extern int BCryptCloseAlgorithmProvider(IntPtr hAlgorithm, uint dwFlags);

    private const uint BCRYPT_ALG_HANDLE_HMAC_FLAG = 0x00000008;
    private const int ERROR_SUCCESS = 0;

    public static byte[] ComputePbkdf2Sha256(byte[] password, byte[] salt, int iterations, int outputLength)
    {
        if (password == null || salt == null)
            throw new ArgumentNullException();
        if (iterations <= 0 || outputLength <= 0)
            throw new ArgumentOutOfRangeException();

        IntPtr hAlgorithm;
        int status = BCryptOpenAlgorithmProvider(out hAlgorithm, "SHA256", null, BCRYPT_ALG_HANDLE_HMAC_FLAG);
        if (status != ERROR_SUCCESS)
            throw new System.ComponentModel.Win32Exception(status);

        try
        {
            byte[] derivedKey = new byte[outputLength];
            status = BCryptDeriveKeyPBKDF2(hAlgorithm, password, password.Length, salt, salt.Length, (uint)iterations, derivedKey, derivedKey.Length, 0);
            if (status != ERROR_SUCCESS)
                throw new System.ComponentModel.Win32Exception(status);

            return derivedKey;
        }
        finally
        {
            BCryptCloseAlgorithmProvider(hAlgorithm, 0);
        }
    }
}

// 测试代码
byte[] salt = new byte[32];
RandomNumberGenerator.Create().GetBytes(salt);
var pwhash = Pbkdf2Helper.ComputePbkdf2Sha256(System.Text.Encoding.UTF8.GetBytes("passwd"), salt, 600000, 32);
pwhash.Dump();

关键说明 #

• 该代码直接调用Windows的BCrypt API，利用系统级的PBKDF2优化实现，性能会接近.NET 8的水平；
• 仅适用于Windows环境（依赖系统自带的bcrypt.dll）；
• 无需引入任何第三方库或AspNetCore.Identity，完全基于.NET Framework 4.8的P/Invoke能力实现。

内容的提问来源于stack exchange，提问作者Graf