linguanostra / ELFinder.Connector.NET

ELFinder Connector for .NET with support for NancyFX and ASP.NET MVC
BSD 3-Clause "New" or "Revised" License
12 stars 8 forks source link

ELFinder use of MD5 crashes when FIPS compliance is enabled #19

Open ses4j opened 4 years ago

ses4j commented 4 years ago

When Windows has FIPS compliance turned on, the MD5 algorithm is broken and throws an exception, breaking use of ELFinder.

I will prepare a pull request. Would it be preferred to replace the MD5 algorithm with another algorithm or a replacement implementation of MD5 that isn't crippled?

I believe MD5 is perfectly acceptable in this usage (see for example https://crypto.stackexchange.com/questions/12677/strength-of-md5-in-finding-duplicate-files/61527#61527?newreg=1199d15c3be04f54a6fa973464c7740a).

ses4j commented 4 years ago

Many other packages have wrestled with this: