search

kepazon / mvc-mini-profiler

Automatically exported from code.google.com/p/mvc-mini-profiler
0 stars 0 forks source link

Use of MD5 Algorithm is not FIPS compliant #128

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. Use secpol.msc, find Local Policies / Security Options "System Cryptography: 
Use FIPS compliant algorithms"
2. Enable it, restart App Pool / IIS for website
3. An InvalidOperationException will be raised due to MD5 not being a FIPS 
compliant hash algorithm.

What is the expected output? What do you see instead?
That MiniProfiler work.

What version of the product are you using? On what operating system?
MiniProfiler: 1.9.1

Please provide any additional information below.

The offending line the cctor of Settings when computing an MD5 hash of the 
assembly. Recommended use is SHA1 and not a GUID.

Original issue reported on code.google.com by ke...@vcsjones.com on 9 Dec 2011 at 4:10

GoogleCodeExporter commented 9 years ago 
fine, moved it to sha256 ... so we are compliant for the next few decades

Original comment by sam.saff...@gmail.com on 13 Feb 2012 at 6:17

GoogleCodeExporter commented 9 years ago

Original comment by sam.saff...@gmail.com on 13 Feb 2012 at 6:46