Replace SHA-256-specific recommendations in 12 snippet files with NIST-approved language

Agent-Logs-Url: https://github.com/dotnet/dotnet-api-docs/sessions/6dd58f84-d55d-4ebe-96bd-c0632ea15c42

Co-authored-by: krwq <660048+krwq@users.noreply.github.com>

Author: Copilot

snippets/csharp/System.CodeDom/CodeChecksumPragma/Overview/codedirective.cs

@@ -85,7 +85,7 @@ static void DemonstrateCodeDirectives(string providerName, string sourceFileName
         }
 
         // This example uses the SHA1 and MD5 algorithms.
-        // Due to collision problems with SHA1 and MD5, Microsoft recommends SHA256 or better.
+        // Due to collision problems with SHA1 and MD5, Microsoft recommends using a NIST-approved hash function.
         private static Guid HashMD5 = new Guid(0x406ea660, 0x64cf, 0x4c82, 0xb6, 0xf0, 0x42, 0xd4, 0x81, 0x72, 0xa7, 0x99);
         private static Guid HashSHA1 = new Guid(0xff1816ec, 0xaa5e, 0x4d10, 0x87, 0xf7, 0x6f, 0x49, 0x63, 0x83, 0x34, 0x60);
 

snippets/csharp/System.Security.Cryptography/AsymmetricAlgorithm/Overview/customcrypto.cs

@@ -203,7 +203,7 @@ public override string KeyExchangeAlgorithm
         // Retrieves the name of the signature alogrithm.
         //<Snippet7>
         // This example uses the SHA1 algorithm.
-        // Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
+        // Due to collision problems with SHA1, Microsoft recommends using a NIST-approved hash function.
         public override string SignatureAlgorithm 
         {
             get {return "http://www.w3.org/2000/09/xmldsig#rsa-sha1";}

snippets/csharp/System.Security.Cryptography/CryptoConfig/Overview/members.cs

@@ -20,7 +20,7 @@ static void Main(string[] args)
         // Create a new SHA1 provider.
         //<Snippet4>
         // This example uses the SHA1 algorithm.
-        // Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
+        // Due to collision problems with SHA1, Microsoft recommends using a NIST-approved hash function.
         SHA1CryptoServiceProvider SHA1alg = 
             (SHA1CryptoServiceProvider)CryptoConfig.CreateFromName("SHA1");
         //</Snippet4>
@@ -41,14 +41,14 @@ static void Main(string[] args)
         // (OID) from the string name of the SHA1 algorithm.
         //<Snippet3>
         // This example uses the SHA1 algorithm.
-        // Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
+        // Due to collision problems with SHA1, Microsoft recommends using a NIST-approved hash function.
         string sha1Oid = CryptoConfig.MapNameToOID("SHA1");
         //</Snippet3>
 
         // Encode the specified object identifier.
         //<Snippet6>
         // This example uses the SHA1 algorithm.
-        // Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
+        // Due to collision problems with SHA1, Microsoft recommends using a NIST-approved hash function.
         byte[] encodedMessage = CryptoConfig.EncodeOID(sha1Oid);
         //</Snippet6>
 

snippets/csharp/System.Security.Cryptography/PasswordDeriveBytes/Overview/sample.cs

@@ -32,7 +32,7 @@ public static void Main(String[] args)
             // Create the key and set it to the Key property
             // of the TripleDESCryptoServiceProvider object.
             // This example uses the SHA1 algorithm.
-            // Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
+            // Due to collision problems with SHA1, Microsoft recommends using a NIST-approved hash function.
             tdes.Key = pdb.CryptDeriveKey("TripleDES", "SHA1", 192, tdes.IV);
 
             //</Snippet2>

snippets/csharp/System.Security.Cryptography/RSACryptoServiceProvider/SignHash/class1.cs

@@ -1,6 +1,6 @@
 //<Snippet1>
 // This example uses the SHA1 algorithm.
-// Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
+// Due to collision problems with SHA1, Microsoft recommends using a NIST-approved hash function.
 using System;
 using System.Text;
 using System.Security.Cryptography;

snippets/csharp/VS_Snippets_CFX/samlattribute/cs/source.cs

@@ -922,7 +922,7 @@ public class Elements
             public class ComputedKeyAlgorithms
             {
                 // This example uses the SHA1 algorithm.
-                // Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
+                // Due to collision problems with SHA1, Microsoft recommends using a NIST-approved hash function.
                 public const string PSHA1 = "http://schemas.xmlsoap.org/ws/2005/02/trust/CK/PSHA1";
             }
         }
@@ -1067,7 +1067,7 @@ public bool ComputeKey
         public static byte[] ComputeCombinedKey(byte[] requestorEntropy, byte[] issuerEntropy, int keySize)
         {
             // This example uses the SHA1 algorithm.
-            // Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
+            // Due to collision problems with SHA1, Microsoft recommends using a NIST-approved hash function.
             KeyedHashAlgorithm kha = new HMACSHA1(requestorEntropy, true);
 
             byte[] key = new byte[keySize / 8]; // Final key
@@ -1179,7 +1179,7 @@ protected override void OnWriteBodyContents(XmlDictionaryWriter writer)
                 // Write the wst:ComputeKey start tag.
                 writer.WriteStartElement(Constants.Trust.Elements.ComputedKey, Constants.Trust.NamespaceUri);
                 // This example uses the SHA1 algorithm.
-                // Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
+                // Due to collision problems with SHA1, Microsoft recommends using a NIST-approved hash function.
                 writer.WriteValue(Constants.Trust.ComputedKeyAlgorithms.PSHA1);
                 writer.WriteEndElement(); // wst:ComputedKey
                 writer.WriteEndElement(); // wst:RequestedSecurityToken
@@ -1311,7 +1311,7 @@ public static SamlSecurityToken CreateSamlToken(string stsName,
 
             // Create a SigningCredentials instance from the key associated with the issuerToken.
             // This example uses the SHA1 algorithm.
-            // Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
+            // Due to collision problems with SHA1, Microsoft recommends using a NIST-approved hash function.
             SigningCredentials signingCredentials = new SigningCredentials(issuerToken.SecurityKeys[0],
                                                                            SecurityAlgorithms.RsaSha1Signature,
                                                                            SecurityAlgorithms.Sha1Digest,

snippets/visualbasic/System.CodeDom/CodeChecksumPragma/Overview/codedirective.vb

@@ -72,7 +72,7 @@ Class CodeDirectiveDemo
     End Sub
 
     ' This example uses the SHA1 and MD5 algorithms.
-    ' Due to collision problems with SHA1 and MD5, Microsoft recommends SHA256 or better.
+    ' Due to collision problems with SHA1 and MD5, Microsoft recommends using a NIST-approved hash function.
     Private Shared HashMD5 As New Guid(&H406EA660, &H64CF, &H4C82, &HB6, &HF0, &H42, &HD4, &H81, &H72, &HA7, &H99)
     Private Shared HashSHA1 As New Guid(&HFF1816EC, &H65FF, &H4D10, &H87, &HF7, &H6F, &H49, &H63, &H83, &H34, &H60)
 

snippets/visualbasic/System.Security.Cryptography/AsymmetricAlgorithm/Overview/customcrypto.vb

@@ -182,7 +182,7 @@ Namespace Contoso
         ' Retrieves the name of the signature alogrithm.
         '<Snippet7>
         ' This example uses the SHA1 algorithm.
-        ' Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
+        ' Due to collision problems with SHA1, Microsoft recommends using a NIST-approved hash function.
         Public Overrides ReadOnly Property SignatureAlgorithm() As String
             Get
                 Return "http://www.w3.org/2000/09/xmldsig#rsa-sha1"

snippets/visualbasic/System.Security.Cryptography/CryptoConfig/Overview/members.vb

@@ -26,7 +26,7 @@ Public Class Form1
         ' Create a new SHA1 provider.
         '<Snippet4>
         ' This example uses the SHA1 algorithm.
-        ' Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
+        ' Due to collision problems with SHA1, Microsoft recommends using a NIST-approved hash function.
         Dim SHA1alg As SHA1CryptoServiceProvider
         SHA1alg = CType( _
             cryptoConfig.CreateFromName("SHA1"), SHA1CryptoServiceProvider)
@@ -50,14 +50,14 @@ Public Class Form1
         '<Snippet3>
         ' (OID) from the string name of the SHA1 algorithm.
         ' This example uses the SHA1 algorithm.
-        ' Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
+        ' Due to collision problems with SHA1, Microsoft recommends using a NIST-approved hash function.
         Dim sha1Oid As String = cryptoConfig.MapNameToOID("SHA1")
         '</Snippet3>
 
         ' Encode the specified object identifier.
         '<Snippet6>
         ' This example uses the SHA1 algorithm.
-        ' Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
+        ' Due to collision problems with SHA1, Microsoft recommends using a NIST-approved hash function.
         Dim encodedMessage() As Byte = cryptoConfig.EncodeOID(sha1Oid)
         '</Snippet6>
 

snippets/visualbasic/System.Security.Cryptography/PasswordDeriveBytes/Overview/sample.vb

@@ -31,7 +31,7 @@ Module PasswordDerivedBytesExample
             ' Create the key and set it to the Key property
             ' of the TripleDESCryptoServiceProvider object.
             ' This example uses the SHA1 algorithm.
-            ' Due to collision problems with SHA1, Microsoft recommends SHA256 or better.
+            ' Due to collision problems with SHA1, Microsoft recommends using a NIST-approved hash function.
             tdes.Key = pdb.CryptDeriveKey("TripleDES", "SHA1", 192, tdes.IV)
             ' </Snippet2>