diff --git a/core/lib/Drupal/Core/Form/FormBuilder.php b/core/lib/Drupal/Core/Form/FormBuilder.php
index 0464daa..bb7034f 100644
--- a/core/lib/Drupal/Core/Form/FormBuilder.php
+++ b/core/lib/Drupal/Core/Form/FormBuilder.php
@@ -655,8 +655,8 @@ public function renderPlaceholderFormAction() {
    * #lazy_builder callback; renders form CSRF token.
    *
    * @param string $placeholder
-   *  A string containing a placeholder. This could've been a different value,
-   *  as long as it matches the value of the form's #token.
+   *  A string containing a placeholder, matching the value of the form's
+   *  #token.
    *
    * @return array
    *   A renderable array containing the CSRF token.
@@ -747,7 +747,7 @@ public function prepareForm($form_id, &$form, FormStateInterface &$form_state) {
       if ($user && $user->isAuthenticated()) {
         // Generate a public token based on the form id.
         // Generates a placeholder based on the form ID.
-        $placeholder = 'form_token_placeholder_' . crc32($form_id);
+        $placeholder = 'form_token_placeholder_' . hash('crc32b', $form_id);
         $form['#token'] = $placeholder;
 
         $form['form_token'] = array(