canvas-lms icon indicating copy to clipboard operation
canvas-lms copied to clipboard

Use SHA256 for temporary ids in classic quizzes

Open mpetrowi opened this issue 4 years ago • 1 comments

This PR changes the algorithm to generate temporary quiz ids from MD5 to SHA256.

This is one of a set of PRs to allow Canvas to run on a host with FIPS modules enabled. FIPS modules disable Digest::MD5 calls, and so we would like to switch to other more modern hashing algorithms.

Test plan:

  • specs pass
  • regression testing of classic quizzes, in particular:
    • fill in multiple blanks questions
    • multiple dropdowns questions

mpetrowi avatar May 20 '21 18:05 mpetrowi

CLA assistant check
All committers have signed the CLA.

CLAassistant avatar May 20 '21 18:05 CLAassistant