[CDRIVER-2671] Remove MD5 from ObjectID generation Created: 29/May/18  Updated: 28/Oct/23  Resolved: 22/Jun/18

Status: Closed
Project: C Driver
Component/s: libbson
Affects Version/s: None
Fix Version/s: 1.11.0

Type: New Feature Priority: Major - P3
Reporter: Rathi Gnanasekaran Assignee: Evgeni Dobranov
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
is depended on by DRIVERS-492 Remove MD5 from ObjectID generation Closed
is depended on by PHPC-1200 Remove MD5 from ObjectID generation Closed
Problem/Incident
causes CDRIVER-2712 Remove MD5 API Backlog
causes CDRIVER-2711 Deprecate MD5 APIs Closed
Epic Link: CDRIVER MongoDB 4.0 Support
Backwards Compatibility: Fully Compatible

 Description   

The MD5 hashing function is not FIPS compliant and all Drivers must remove it's usage in ObjectID generation and must use 32-bit FNV-1a hash function. 



 Comments   
Comment by Githook User [ 22/Jun/18 ]

Author:

{'username': 'edobranov', 'name': 'Evgeni Dobranov', 'email': 'evobranov@gmail.com'}

Message: CDRIVER-2671 swap MD5 with FNV-1a in ObjectIDs
Branch: master
https://github.com/mongodb/mongo-c-driver/commit/69279c5187e4912101c03d47a2e422c932fbe999

Comment by Bernie Hackett [ 31/May/18 ]

from a well-known implementation for 24-bit source

There isn't one, AFAICT.

Comment by A. Jesse Jiryu Davis [ 31/May/18 ]

Copy in some C code from a well-known implementation for 24-bit source and make sure we update THIRD_PARTY_NOTICES. Let the C Driver be the second implementation that validates the test suite already defined for PyMongo.

Generated at Wed Feb 07 21:15:58 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.