title: Veracode Cryptography issue
body: <p>Recently we done a static security scan using Veracode on one of the applications.</p>
  
  <p>The report indicate an issue </p>
  
  <blockquote>
    <p>Use of a Broken or Risky Cryptographic Algorithm (CWE ID 327)</p>
  </blockquote>
  
  <p>It is shown for following code snippet</p>
  
  <pre><code>byte[] CalculateHash(byte[] publicKey) {
          SHA1CryptoServiceProvider hashGenerator = new SHA1CryptoServiceProvider();
          Byte[] hashInArray = new Byte[32];
          PrivateKey.CopyTo(hashInArray,0);            // Combine public key and private key
          publicKey.CopyTo(hashInArray,16);
          return hashGenerator.ComputeHash(hashInArray); // Calculate hash
      }
  </code></pre>
  
  <p>In description it describe SHA1 as a weak algorithm.</p>
  
  <p>I modified the code and used SHA256 instead of SHA1 and performed veracode scanning again but it still show same issue.</p>
  
  <p>What is an alternative for this? any suggestions? </p>