No third party library. It uses standard algorithms like Rfc2898DeriveBytes (for pbkdf2), RNGCryptoServiceProvider ETC defined in System.Security.Cryptography (bundled into the .NET framework)
I'd makes bruto forcing harder - longer :-)
My i ask, what do you use asp.net mvc for?
Myself (@Belgium):
ASP.Net MVC mostly for: - Ecommerce - Invoicing application (SMB development) - DDD application