search

IBM / ibm-cos-sdk-js

ibm-cos-sdk-js
Apache License 2.0
38 stars 20 forks source link

'md5' hash algorithm used at util.js is unsafe #104

Closed dcamacho10 closed 9 months ago

dcamacho10 commented 9 months ago

The hashing algorithm used, md5, has been found by researchers to be unsafe for protecting sensitive data with today's technology.

s = crypto.createHash( "md5" ) (line 503)

avinash1IBM commented 9 months ago

@dcamacho10 The md5 algorithm used in the sdk is not for a cryptographically secure hash or signature(md5 is not suitable for this) rather it is used for the checksumming internal results. And in this sdk it is not used with sensitive data.

dcamacho10 commented 9 months ago

@avinash1IBM Thank you for the clarification.