[CSHARP-1331] Use of SHA256Managed is not FIPS compliant. Created: 22/Jun/15  Updated: 31/Jan/18  Resolved: 25/Jun/15

Status: Closed
Project: C# Driver
Component/s: Security
Affects Version/s: 2.0
Fix Version/s: 2.0.2, 2.1

Type: Bug Priority: Major - P3
Reporter: Craig Wilson Assignee: Craig Wilson
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
related to CSHARP-1703 SCRAM-SHA-1 fails on FIPS machines Closed
related to CSHARP-573 Change MD5 Hash for Machine Key to So... Closed
is related to CSHARP-2163 Make PasswordEvidence implementation ... Closed

 Description   

We are currently using SHA256Managed for an internal detail. We need to be using SHA256CryptoServiceProvider instead, which is validated against FIPS-140.



 Comments   
Comment by Githook User [ 25/Jun/15 ]

Author:

{u'username': u'craiggwilson', u'name': u'Craig Wilson', u'email': u'craiggwilson@gmail.com'}

Message: CSHARP-1331: changed SHA256 algorithm to one that is FIPS compliant.
Branch: v2.0.x
https://github.com/mongodb/mongo-csharp-driver/commit/c916abbbcaf1512a35cb0fd638e134578f4a35af

Comment by Githook User [ 25/Jun/15 ]

Author:

{u'username': u'craiggwilson', u'name': u'Craig Wilson', u'email': u'craiggwilson@gmail.com'}

Message: CSHARP-1331: changed SHA256 algorithm to one that is FIPS compliant.
Branch: master
https://github.com/mongodb/mongo-csharp-driver/commit/cf7b1087d53b3c1ba530cd149f676a10faadcf50

Generated at Wed Feb 07 21:39:17 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.