SHA256 based shadowattribute validation added

- it was missing before
Merge branch 'hotfix-2.2.8'