Replace MD5 and SHA1 (#4542)

Author: tdykstra

samples/snippets/cpp/VS_Snippets_CLR/AssemblyName_CodeBase/CPP/assemblyname_codebase.cpp

@@ -71,8 +71,8 @@ int main()
    // Set the culture information of the assembly to 'English-American'.
    myAssemblyName->CultureInfo = gcnew CultureInfo( "en-US" );
 
-   // Set the hash algoritm to 'SHA1'.
-   myAssemblyName->HashAlgorithm = AssemblyHashAlgorithm::SHA1;
+   // Set the hash algorithm to 'SHA256'.
+   myAssemblyName->HashAlgorithm = AssemblyHashAlgorithm::SHA256;
    myAssemblyName->Name = "MyAssembly";
    myAssemblyName->Version = gcnew Version( "1.0.0.2001" );
    MakeAssembly( myAssemblyName, "MyAssembly.exe" );

samples/snippets/cpp/VS_Snippets_CLR/AssemblyName_KeyPair/CPP/assemblyname_keypair.cpp

@@ -78,8 +78,8 @@ int main()
    // Set the culture information of the assembly to 'English-American'.
    myAssemblyName->CultureInfo = gcnew CultureInfo( "en-US" );
 
-   // Set the hash algoritm to 'SHA1'.
-   myAssemblyName->HashAlgorithm = AssemblyHashAlgorithm::SHA1;
+   // Set the hash algorithm to 'SHA256'.
+   myAssemblyName->HashAlgorithm = AssemblyHashAlgorithm::SHA256;
    myAssemblyName->VersionCompatibility = AssemblyVersionCompatibility::SameProcess;
    myAssemblyName->Flags = AssemblyNameFlags::PublicKey;
 

samples/snippets/cpp/VS_Snippets_CLR/AssemblyName_SetPublicKey/CPP/assemblyname_setpublickey.cpp

@@ -74,8 +74,8 @@ int main()
    // Set the culture information of the assembly to 'English-American'.
    myAssemblyName->CultureInfo = gcnew CultureInfo( "en-US" );
 
-   // Set the hash algoritm to 'SHA1'.
-   myAssemblyName->HashAlgorithm = AssemblyHashAlgorithm::SHA1;
+   // Set the hash algorithm to 'SHA256'.
+   myAssemblyName->HashAlgorithm = AssemblyHashAlgorithm::SHA256;
    myAssemblyName->VersionCompatibility = AssemblyVersionCompatibility::SameProcess;
    myAssemblyName->Flags = AssemblyNameFlags::PublicKey;
 

samples/snippets/cpp/VS_Snippets_CLR/Cryptography.PasswordDerivedbytes/cpp/sample.cpp

@@ -74,6 +74,8 @@ int main(array<String^>^ args)
        // <Snippet2>
 	   // Create the key and set it to the Key property
 	   // of the TripleDESCryptoServiceProvider object.
+       // This example uses the SHA1 algorithm.
+       // Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
         cryptoDESProvider->Key = passwordDeriveBytes->CryptDeriveKey
             ("TripleDES", "SHA1", 192, cryptoDESProvider->IV);
 		//</Snippet2>

samples/snippets/cpp/VS_Snippets_CLR/Cryptography.RSACSP.SignData1/CPP/example.cpp

@@ -13,9 +13,9 @@ array<Byte>^ HashAndSignBytes( array<Byte>^DataToSign, RSAParameters Key, int In
       RSACryptoServiceProvider^ RSAalg = gcnew RSACryptoServiceProvider;
       RSAalg->ImportParameters( Key );
 
-      // Hash and sign the data. Pass a new instance of SHA1CryptoServiceProvider
-      // to specify the use of SHA1 for hashing.
-      return RSAalg->SignData( DataToSign, Index, Length, gcnew SHA1CryptoServiceProvider );
+      // Hash and sign the data. Pass a new instance of SHA256
+      // to specify the hashing algorithm.
+      return RSAalg->SignData( DataToSign, Index, Length, SHA256::Create() );
    }
    catch ( CryptographicException^ e ) 
    {
@@ -35,9 +35,9 @@ bool VerifySignedHash( array<Byte>^DataToVerify, array<Byte>^SignedData, RSAPara
       RSACryptoServiceProvider^ RSAalg = gcnew RSACryptoServiceProvider;
       RSAalg->ImportParameters( Key );
 
-      // Verify the data using the signature.  Pass a new instance of SHA1CryptoServiceProvider
-      // to specify the use of SHA1 for hashing.
-      return RSAalg->VerifyData( DataToVerify, gcnew SHA1CryptoServiceProvider, SignedData );
+      // Verify the data using the signature.  Pass a new instance of SHA256
+      // to specify the hashing algorithm.
+      return RSAalg->VerifyData( DataToVerify, SHA256::Create(), SignedData );
    }
    catch ( CryptographicException^ e ) 
    {

samples/snippets/cpp/VS_Snippets_CLR/Cryptography.RSACSP.SignData2/CPP/example.cpp

@@ -13,9 +13,9 @@ array<Byte>^ HashAndSignBytes( array<Byte>^DataToSign, RSAParameters Key )
       RSACryptoServiceProvider^ RSAalg = gcnew RSACryptoServiceProvider;
       RSAalg->ImportParameters( Key );
 
-      // Hash and sign the data. Pass a new instance of SHA1CryptoServiceProvider
-      // to specify the use of SHA1 for hashing.
-      return RSAalg->SignData( DataToSign, gcnew SHA1CryptoServiceProvider );
+      // Hash and sign the data. Pass a new instance of SHA256
+      // to specify the hashing algorithm.
+      return RSAalg->SignData( DataToSign, SHA256::Create() );
    }
    catch ( CryptographicException^ e ) 
    {
@@ -35,9 +35,9 @@ bool VerifySignedHash( array<Byte>^DataToVerify, array<Byte>^SignedData, RSAPara
       RSACryptoServiceProvider^ RSAalg = gcnew RSACryptoServiceProvider;
       RSAalg->ImportParameters( Key );
 
-      // Verify the data using the signature.  Pass a new instance of SHA1CryptoServiceProvider
-      // to specify the use of SHA1 for hashing.
-      return RSAalg->VerifyData( DataToVerify, gcnew SHA1CryptoServiceProvider, SignedData );
+      // Verify the data using the signature.  Pass a new instance of SHA256
+      // to specify the hashing algorithm.
+      return RSAalg->VerifyData( DataToVerify, SHA256::Create(), SignedData );
    }
    catch ( CryptographicException^ e ) 
    {

samples/snippets/cpp/VS_Snippets_CLR/Cryptography.RSACSP.SignData3/CPP/example.cpp

@@ -20,9 +20,9 @@ array<Byte>^ HashAndSignBytes( Stream^ DataStream, RSAParameters Key )
       RSACryptoServiceProvider^ RSAalg = gcnew RSACryptoServiceProvider;
       RSAalg->ImportParameters( Key );
 
-      // Hash and sign the data. Pass a new instance of SHA1CryptoServiceProvider
-      // to specify the use of SHA1 for hashing.
-      return RSAalg->SignData( DataStream, gcnew SHA1CryptoServiceProvider );
+      // Hash and sign the data. Pass a new instance of SHA256
+      // to specify the hashing algorithm.
+      return RSAalg->SignData( DataStream, SHA256::Create() );
    }
    catch ( CryptographicException^ e ) 
    {
@@ -42,9 +42,9 @@ bool VerifySignedHash( array<Byte>^DataToVerify, array<Byte>^SignedData, RSAPara
       RSACryptoServiceProvider^ RSAalg = gcnew RSACryptoServiceProvider;
       RSAalg->ImportParameters( Key );
 
-      // Verify the data using the signature.  Pass a new instance of SHA1CryptoServiceProvider
-      // to specify the use of SHA1 for hashing.
-      return RSAalg->VerifyData( DataToVerify, gcnew SHA1CryptoServiceProvider, SignedData );
+      // Verify the data using the signature.  Pass a new instance of SHA256
+      // to specify the hashing algorithm.
+      return RSAalg->VerifyData( DataToVerify, SHA256(), SignedData );
    }
    catch ( CryptographicException^ e ) 
    {

samples/snippets/cpp/VS_Snippets_CLR/Cryptography.SmartCardCSP/CPP/Cryptography.SmartCardCSP.cpp

@@ -27,11 +27,11 @@ int main()
    Console::WriteLine( L"Data			: {0}", BitConverter::ToString( data ) );
 
    // Sign the data using the Smart Card CryptoGraphic Provider.
-   array<Byte>^sig = rsa->SignData( data, L"SHA1" );
+   array<Byte>^sig = rsa->SignData( data, L"SHA256" );
    Console::WriteLine( L"Signature	: {0}", BitConverter::ToString( sig ) );
 
    // Verify the data using the Smart Card CryptoGraphic Provider.
-   bool verified = rsa->VerifyData( data, L"SHA1", sig );
+   bool verified = rsa->VerifyData( data, L"SHA256", sig );
    Console::WriteLine( L"Verified		: {0}", verified );
 }
 

samples/snippets/cpp/VS_Snippets_CLR_Classic/classic HashAlgorithm Example/CPP/source.cpp

@@ -15,7 +15,7 @@ public ref class Form1: public Form
    void Method()
    {
       // <Snippet1>
-      HashAlgorithm^ sha = gcnew SHA1CryptoServiceProvider;
+      HashAlgorithm^ sha = SHA256::Create();
       array<Byte>^ result = sha->ComputeHash( dataArray );
       // </Snippet1>
    }

samples/snippets/cpp/VS_Snippets_CLR_System/System.Security.Cryptography.RSACryptoServiceProvider ManualHash Example/CPP/class1.cpp

@@ -1,6 +1,8 @@
 
 
 //<snippet1>
+// This example uses the SHA1 algorithm.
+// Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
 #using <System.dll>
 
 using namespace System;