diff --git a/src/Microsoft.AspNet.Security/Infrastructure/AuthenticationHandler.cs b/src/Microsoft.AspNet.Security/Infrastructure/AuthenticationHandler.cs
index 3526d1e5b9..57c1931f9c 100644
--- a/src/Microsoft.AspNet.Security/Infrastructure/AuthenticationHandler.cs
+++ b/src/Microsoft.AspNet.Security/Infrastructure/AuthenticationHandler.cs
@@ -23,7 +23,7 @@ namespace Microsoft.AspNet.Security.Infrastructure
     /// </summary>
     public abstract class AuthenticationHandler : IAuthenticationHandler
     {
-        private static readonly RNGCryptoServiceProvider CryptoRandom = new RNGCryptoServiceProvider();
+        private static readonly RandomNumberGenerator CryptoRandom = RandomNumberGenerator.Create();
 
         private Task<AuthenticationTicket> _authenticate;
         private bool _authenticateInitialized;