GoogleChrome / GoogleChrome/workbox
FIPS mode - hardcoded MD5 crypto alg for generating resource hash code not allowed
- Dominant language
- JavaScript
- Stars
- 13k
- Forks
- 880
- Avg merge
- 2h 44m
- Merged PRs (30d)
- 8
Description
Hi.
We're getting
```
ERROR: :error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS, stack: Error: error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS
at new Hash (node:internal/crypto/hash:71:19)
at Object.createHash (node:crypto:130:10)
at getStringHash (${current}/node_modules/workbox-build/build/lib/get-string-hash.js:16:34)
...
```
in our product that runs workbox-build to generate SW entries in FIPS mode.
From looking into the code of latest 7.1.1 version I see MD5 is hardcoded in
workbox-build/src/lib/get-string-hash.ts
Would it be possible to replace MD5 with CRC64 or another simple hash function?
Thank you in advance for looking into this issue.
Contributor guide
Assessment
This issue has not been assessed yet.