<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Wed Feb 07 21:41:47 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[CSHARP-2163] Make PasswordEvidence implementation FIPS compliant</title>
                <link>https://jira.mongodb.org/browse/CSHARP-2163</link>
                <project id="10041" key="CSHARP">C# Driver</project>
                    <description>&lt;p&gt;The implementation of PasswordEvidence uses SHA256Managed and SHA256Managed is not FIPS compliant.&lt;/p&gt;

&lt;p&gt;In fact, PasswordEvidence doesn&apos;t need to use SHA256 at all. It is only used as an optimization for the Equals method, to avoid having to decrypt the SecureString to compare two passwords.&lt;/p&gt;

&lt;p&gt;Equals should be implemented in such a way that two PasswordEvidence instances can be compared without using a non-FIPS compliant method.&lt;/p&gt;</description>
                <environment></environment>
        <key id="490487">CSHARP-2163</key>
            <summary>Make PasswordEvidence implementation FIPS compliant</summary>
                <type id="4" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14710&amp;avatarType=issuetype">Improvement</type>
                                            <priority id="3" iconUrl="https://jira.mongodb.org/images/icons/priorities/major.svg">Major - P3</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="13201">Fixed</resolution>
                                        <assignee username="robert@mongodb.com">Robert Stam</assignee>
                                    <reporter username="robert@mongodb.com">Robert Stam</reporter>
                        <labels>
                    </labels>
                <created>Wed, 31 Jan 2018 21:53:11 +0000</created>
                <updated>Sat, 28 Oct 2023 11:49:09 +0000</updated>
                            <resolved>Wed, 21 Feb 2018 15:37:27 +0000</resolved>
                                    <version>2.5</version>
                                    <fixVersion>2.6.0</fixVersion>
                                    <component>Security</component>
                                        <votes>1</votes>
                                    <watches>3</watches>
                                                                                                                <comments>
                            <comment id="1871225" author="xgen-internal-githook" created="Mon, 23 Apr 2018 13:29:36 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;email&apos;: &apos;robert@robertstam.org&apos;, &apos;username&apos;: &apos;rstam&apos;, &apos;name&apos;: &apos;rstam&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/CSHARP-2163&quot; title=&quot;Make PasswordEvidence implementation FIPS compliant&quot; class=&quot;issue-link&quot; data-issue-key=&quot;CSHARP-2163&quot;&gt;&lt;del&gt;CSHARP-2163&lt;/del&gt;&lt;/a&gt;: Make PasswordEvidence implementation FIPS compliant.&lt;br/&gt;
Branch: v2.6.x&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo-csharp-driver/commit/eb425d98a681ae6ae609631d71d2ded5c3f88c56&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo-csharp-driver/commit/eb425d98a681ae6ae609631d71d2ded5c3f88c56&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="1811573" author="xgen-internal-githook" created="Wed, 21 Feb 2018 15:37:02 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;email&apos;: &apos;robert@robertstam.org&apos;, &apos;name&apos;: &apos;rstam&apos;, &apos;username&apos;: &apos;rstam&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/CSHARP-2163&quot; title=&quot;Make PasswordEvidence implementation FIPS compliant&quot; class=&quot;issue-link&quot; data-issue-key=&quot;CSHARP-2163&quot;&gt;&lt;del&gt;CSHARP-2163&lt;/del&gt;&lt;/a&gt;: Make PasswordEvidence implementation FIPS compliant.&lt;br/&gt;
Branch: master&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo-csharp-driver/commit/b768be43b79c9102abba13d772d8442355883eca&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo-csharp-driver/commit/b768be43b79c9102abba13d772d8442355883eca&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="1791202" author="rstam" created="Wed, 31 Jan 2018 21:54:06 +0000"  >&lt;p&gt;Looks like switching to SHA256Managed to run on .NET Core was an inadvertent regression.&lt;/p&gt;

&lt;p&gt;See:&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/browse/CSHARP-1331&quot; class=&quot;external-link&quot; rel=&quot;nofollow&quot;&gt;https://jira.mongodb.org/browse/CSHARP-1331&lt;/a&gt;&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10011">
                    <name>Depends</name>
                                                                <inwardlinks description="is depended on by">
                                                        </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10012">
                    <name>Related</name>
                                            <outwardlinks description="related to">
                                        <issuelink>
            <issuekey id="212258">CSHARP-1331</issuekey>
        </issuelink>
                            </outwardlinks>
                                                        </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                    <customfield id="customfield_10857" key="com.pyxis.greenhopper.jira:gh-epic-link">
                        <customfieldname>Epic Link</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>CSHARP-2169</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|htgtlj:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            </customfields>
    </item>
</channel>
</rss>