I've enabled FIPS compliance mode in Windows 7, but now my code fails to compile with the following error:
Source file 'whatever.cs' could not be opened ('This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms.')
I'm using SHA1 (hashing) and TripleDes (encryption) encryption. I also tried SHA512 and AES (256 bit key).
I can't get the project to build any more, but I need to compile it to use FIPS Compliant algorithms.
Go to Start > Control Panel > Administrative tools > Local Security Policy. The Group Policy dialog appears. Under the 'Local Policies' heading, select 'Security Options' Look for the entry, 'System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing.
In Security Settings, expand Local Policies, and then click Security Options. Under Policy in the right pane, double-click System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing, and then click Disabled.
Overview. Open up your registry editor and navigate to HKLM\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy\Enabled. If the Enabled value is 0 then FIPS is not enabled. If the Enabled value is 1 then FIPS is enabled.
This has a list of FIPS compliant algorithms. A more complete list is here
FIPS compliant Algorithms:
Hash algorithms
HMACSHA1
MACTripleDES
SHA1CryptoServiceProvider
Symmetric algorithms (use the same key for encryption and decryption)
DESCryptoServiceProvider
TripleDESCryptoServiceProvider
Asymmetric algorithms (use a public key for encryption and a private key for decryption)
DSACryptoServiceProvider
RSACryptoServiceProvider
So you will need to use SHA1CryptoServiceProvider
and TripleDESCryptoServiceProvider
to be FIPS compliant
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With