search

awslabs / kinesis-aggregation

AWS libraries/modules for working with Kinesis aggregated record data
Apache License 2.0
376 stars 154 forks source link

aws_kinesis_agg not supported in FIPS mode #144

Closed Yc2034 closed 2 years ago

Yc2034 commented 2 years ago

Library aws aws_kinesis_agg is using md5 which is not being supported in FIPS mode python 3.9.6 (hardened image)

Error Description: aws_kinesis_agg/init.py",line 21, in 0|classifi | DIGEST_SIZE = hashlib.md5().digest_size 0|classifi | ValueError: [digital envelope routines: EVP_DigestInit_ex] disabled for fips

IanMeyers commented 2 years ago

Unfortunately this hash is built into the protobuf protocol and kinesis encoders, and therefore cannot be changed without altering the digest and therefore the message structure.