[ 
https://issues.apache.org/jira/browse/IMPALA-10679?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17335674#comment-17335674
 ] 

Wenzhe Zhou commented on IMPALA-10679:
--------------------------------------

In FIPS enabled environment, the crypto libraries were replaced with the FIPS 
CryptoComply libraries. The CryptoComply libraries have no way of 
distinguishing between MD5 being used for non-security purposes versus security 
purposes, it simply throw exception. So we should avoid all use of forbidden 
algorithms in future development. Some customers may even use tools to scan the 
executable binaries to check if there any forbidden algorithms. For FIPS 
release, builtin MD5 function is not allowed.

Right, in FIPS mode, Impala should raise an error for "SELECT MD5('ABC')".

> Create SHA2 builtin function
> ----------------------------
>
>                 Key: IMPALA-10679
>                 URL: https://issues.apache.org/jira/browse/IMPALA-10679
>             Project: IMPALA
>          Issue Type: New Feature
>          Components: Backend
>            Reporter: Zoltán Borók-Nagy
>            Assignee: Amogh Margoor
>            Priority: Major
>              Labels: newbie, ramp-up
>
> Add support for the SHA2 family of hash functions (SHA-224, SHA-256, SHA-384, 
> and SHA-512).
> Hive already supports SHA2: HIVE-10644
> We should add a similar builtin function.
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to