Merge pull request #73 from bmccormack/master

Use SHA256CryptoServiceProvider instead of SHA256. This prevents a FIPS exception from being thrown.
SamSaffron · Sep 17, 2012 · ebdffb9 · ebdffb9
2 parents 2764671 + dd19716
commit ebdffb9
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/StackExchange.Profiling/MiniProfiler.Settings.cs b/StackExchange.Profiling/MiniProfiler.Settings.cs
@@ -58,12 +58,12 @@ where p.IsDefined(t, inherit: false)
                         files.AddRange(System.IO.Directory.EnumerateFiles(customUITemplatesPath));
                     }
 
-                    using (var sha256 = System.Security.Cryptography.SHA256.Create())
+                    using (var sha256 = new System.Security.Cryptography.SHA256CryptoServiceProvider())
                     {
                         byte[] hash = new byte[sha256.HashSize / 8];
                         foreach (string file in files)
                         {
-                            // sha256 is FIPS BABY - FIPS 
+                            // sha256 can throw a FIPS exception, but SHA256CryptoServiceProvider is FIPS BABY - FIPS 
                             byte[] contents = System.IO.File.ReadAllBytes(file);
                             byte[] hashfile = sha256.ComputeHash(contents);
                             for (int i = 0; i < (sha256.HashSize / 8); i++)