FIPS 验证的加密算法的问题
我正在使用 Intel Core 2 Duo E8400 3 GHz 处理器的 Windows XP Pro Version 2002 SP 3 下运行带有 .NET 3.5 SP 1 的 Visual Studio 2008 版本 9.0.30729.1 SP。
我正在开发一个使用 Microsoft Patterns & 的 C# WPF 应用程序。实践组的复合应用程序库 (CAL)。
我在 XAML 中收到以下编译错误：
“MC1000：此实现不是 Windows 平台 FIPS 验证的加密算法的一部分。”
我在 Microsoft 知识库文章 935434 中找到了一个应该可以解决此问题的修补程序。但是，此修补程序的安装程序报告以下错误：
“Windows Installer 服务无法安装升级补丁，因为要升级的程序可能是缺少，或者升级补丁可能会更新该程序的不同版本。请验证您的计算机上是否存在要升级的程序，并且您拥有正确的升级补丁。”
该修补程序的页面将 .NET 3.0 列为先决条件。虽然我使用的是 .Net 3.5，但我的机器也安装了 .NET 3.0。因此，我希望安装此修补程序。我希望即使该修补程序针对的是 .NET 3.0，它仍然可以解决我的问题。
无论如何，我无法安装该修补程序。有人对如何克服我看到的“此实现不属于...”编译错误有任何替代建议吗？
谢谢， 戴夫
I am running Visual Studio 2008 Version 9.0.30729.1 SP with .NET 3.5 SP 1 under Windows XP Pro Version 2002 SP 3 with an Intel Core 2 Duo E8400 3 GHz processor.
I am developing a C# WPF application that uses the Microsoft Patterns & Practices group's Composite Application Library (CAL).
I am getting the following compliation error in XAML:
"MC1000: This implementation is not part of the Windows platform FIPS validated cryptographic algorithms."
I have found a hotfix that is supposed to fix this in Microsoft Knowledge Base aritcle 935434. However, the installer for this hotfix reports the following error:
"The upgrade patch cannot be installed by the Windows Installer service because the program to be upgraded may be missing, or the upgrade patch may update a different version of the program. Verify that the program to be upgraded exists on your computer and that you have the correct upgrade patch."
The page for the hotfix lists .NET 3.0 as a prerequisite. Though I'm working with .Net 3.5, my machine does have .NET 3.0 installed as well. I would therefore expect this hotfix to install. It was my hope that even though the hotfix is targeted at .NET 3.0, it would nonetheless solve my problem.
In any event, I cannot install the hotfix. Does anybody have any alternate suggestions on how I can get past the "This implementation is not part of..." compilation error I'm seeing?
Thanks,
Dave
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
我想知道您的计算机上是否开启了 FIPS 合规性检查。
这是我不久前写的一篇文章，讨论了如何关闭它以及为什么您可能会收到此错误消息。
基本上，FIPS 是美国联邦政府的安全和加密标准。基于此，如果您的计算机在 FIPS 合规模式下运行，某些加密算法将不会在您的计算机上运行。
在这种情况下，简单的修复方法是关闭 FIPS 合规性检查。正确的解决方法是选择正确的加密算法。
这是我的帖子： http://blog.aggreeratedintelligence.com/ 2007/10/fips-validated-cryptography-algorithms.html
还有这个： http://blog.aggreeratedintelligence.com/2009 /08/cryptography-algorithms-and-net.html
I wonder if FIPS compliance checking is turned on on your machine.
Here is a post that I had written a while back that talks about turning it off and why you might be getting this error messages.
Basically FIPS is a US federal government standard for security and encryption. Based on it, some encryption algorithms will not run on your machine, if your machine is running in FIPS compliance mode.
Easy fix in that case is to turn off FIPS compliance checking. The right fix is to pick the correct encryption algorithm.
Here is my post: http://blog.aggregatedintelligence.com/2007/10/fips-validated-cryptographic-algorithms.html
and this one: http://blog.aggregatedintelligence.com/2009/08/cryptographic-algorithms-and-net.html
我花了几个小时寻找这个答案。
我使用的是Win7 64位，我只是将这个本地策略设置为禁用：
系统加密：使用FIPS 140兼容的加密算法，包括加密、散列和签名
算法
控制面板 -> 管理工具 -> 本地计算机策略 -> 计算机配置 -> Windows 设置 -> 安全设置 -> 本地策略 -> 安全选项
尽情享受吧！
I have some hours looking for this answer.
I am using Win7 64 Bits, I just turn as Disabled this local policy:
System cryptography: Use FIPS 140 compliant cryptographic algorithms, including encryption, hashing and signing algorithms
On
Control Panel ->Administrative Tools ->Local Computer Policy ->Computer Configuration ->Windows Setting ->Security Settings ->Local Policies ->Security Options
Enjoy it!!!