GoogleChrome / GoogleChrome/workbox

FIPS mode - hardcoded MD5 crypto alg for generating resource hash code not allowed

Open
#3,366 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
13k
Forks
880
Avg merge
2h 44m
Merged PRs (30d)
8

Description

Hi.
We're getting
```
ERROR: :error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS, stack: Error: error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS
at new Hash (node:internal/crypto/hash:71:19)
at Object.createHash (node:crypto:130:10)
at getStringHash (${current}/node_modules/workbox-build/build/lib/get-string-hash.js:16:34)
...
```
in our product that runs workbox-build to generate SW entries in FIPS mode.

From looking into the code of latest 7.1.1 version I see MD5 is hardcoded in
workbox-build/src/lib/get-string-hash.ts

Would it be possible to replace MD5 with CRC64 or another simple hash function?
Thank you in advance for looking into this issue.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.