diff --git a/infra/prism-impl/src/main/java/com/evolveum/midpoint/prism/impl/crypto/KeyStoreBasedProtectorImpl.java b/infra/prism-impl/src/main/java/com/evolveum/midpoint/prism/impl/crypto/KeyStoreBasedProtectorImpl.java
index 9150da465e6..f3402e2cca1 100644
--- a/infra/prism-impl/src/main/java/com/evolveum/midpoint/prism/impl/crypto/KeyStoreBasedProtectorImpl.java
+++ b/infra/prism-impl/src/main/java/com/evolveum/midpoint/prism/impl/crypto/KeyStoreBasedProtectorImpl.java
@@ -690,7 +690,7 @@ public boolean areEquivalent(ProtectedStringType a, ProtectedStringType b) throw
 
 	private boolean areEquivalentHashed(ProtectedStringType a, ProtectedStringType b) {
 		// We cannot compare two hashes in any other way.
-		return Objects.equals(a.getHashedDataType(), a.getHashedDataType());
+		return Objects.equals(a.getHashedDataType(), b.getHashedDataType());
 	}
 	
 	private boolean areEquivalentEncrypted(ProtectedStringType a, ProtectedStringType b) throws EncryptionException {