Uploaded image for project: 'Python Driver'
  1. Python Driver
  2. PYTHON-1521

Remove MD5 from ObjectId generation

    • Type: Icon: Task Task
    • Resolution: Fixed
    • Priority: Icon: Minor - P4 Minor - P4
    • 3.7
    • Affects Version/s: None
    • Component/s: None
    • Labels:
      None

      In FIPS environments hashlib.md5 isn't available or just fails. We don't technically need it for ObjectId generation.

      We've decided to replace md5 with FNV-1a, 32 bit xor-folded to 24 bit. A few other drivers already use non-cryptographic hashes for this (e.g. Java and .NET), a cryptographic hash is not required, and using a non-cryptographic hash avoids ever having to deal with this again in the future.

            Assignee:
            bernie@mongodb.com Bernie Hackett
            Reporter:
            bernie@mongodb.com Bernie Hackett
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: