[
https://issues.apache.org/jira/browse/IMPALA-10205?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Wenzhe Zhou updated IMPALA-10205:
---------------------------------
Description: To support FIPS, all new code have to use FIPS-approved
algorithms. Current code generate data path hash in MD5 hash for Iceberg Table.
But MD5 is one of forbidden algorithms for FIPS. Even for non-security
purposes, like hash map, we still cannot use MD5 since CryptoComply libraries
have no way to distinguish between hash function being used for non-security
purposes versus security purposes. We have to replace MD5 with FIPS-approved
algorithm, or non-cryptographic hash function like Murmur-hash. (was: To
support FIPS, all new code have to use FIPS-approved algorithms. Current code
generate data path hash in MD5 hash for Iceberg Table. But MD5 is one of
forbidden algorithms for FIPS. We have to replace MD5 with FIPS-approved
algorithm, like SHA-512. )
> Replace MD5 hash algorithm for data file path of IcebergTable
> -------------------------------------------------------------
>
> Key: IMPALA-10205
> URL: https://issues.apache.org/jira/browse/IMPALA-10205
> Project: IMPALA
> Issue Type: Improvement
> Components: Frontend
> Affects Versions: Impala 4.0
> Reporter: Wenzhe Zhou
> Assignee: Wenzhe Zhou
> Priority: Major
> Labels: FIPS
> Fix For: Impala 4.0
>
>
> To support FIPS, all new code have to use FIPS-approved algorithms. Current
> code generate data path hash in MD5 hash for Iceberg Table. But MD5 is one of
> forbidden algorithms for FIPS. Even for non-security purposes, like hash map,
> we still cannot use MD5 since CryptoComply libraries have no way to
> distinguish between hash function being used for non-security purposes versus
> security purposes. We have to replace MD5 with FIPS-approved algorithm, or
> non-cryptographic hash function like Murmur-hash.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
