Menu

#3366 FIPS mode - hardcoded MD5 crypto alg for generating resource hash code not allowed

open
nobody
None
2024-10-17
2024-10-17
Anonymous
No

Originally created by: mfukala

Hi.
We're getting

ERROR: :error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS, stack: Error: error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS
at new Hash (node:internal/crypto/hash:71:19)
at Object.createHash (node:crypto:130:10)
at getStringHash (${current}/node_modules/workbox-build/build/lib/get-string-hash.js:16:34)
...

in our product that runs workbox-build to generate SW entries in FIPS mode.

From looking into the code of latest 7.1.1 version I see MD5 is hardcoded in
workbox-build/src/lib/get-string-hash.ts

Would it be possible to replace MD5 with CRC64 or another simple hash function?
Thank you in advance for looking into this issue.

Discussion


Log in to post a comment.