Skip to content

FIPS 140-3 complaint without turning checksum off #19

@bander-1

Description

@bander-1

Description

ibm-cos-sdk uses MD5 intensively as a checksum method. MD5 is not FIPS 140-3 complaint algorithm.

When enabling FIPS mode in our go application we face lots of error similler to below:

"ContentMD5: failed to compute body MD5\ncaused by: crypto/md5: use of MD5 is not allowed in FIPS 140-only mode"

we overcame this by setting S3DisableContentMD5Validation to true.
This option is part of aws-sdk-go and not anymore available in aws-sdk-go-v2 since they are not using MD5 by default, aws/aws-sdk-go-v2#2769

Request

provide alternative checksum method to MD5 that is FIPS complaint such as x-amz-checksum-sha256
https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObjects.html

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions