[IMPALA-10207] Replace MD5 hash for lineage graph

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Impala 4.0.0
• Fix Version/s: Impala 4.0.0
• Component/s: Frontend
• Labels: FIPS
• Target Version: Impala 4.0.0
• Epic Color: ghx-label-5
• Assignee: Wenzhe Zhou
• Reporter: Wenzhe Zhou
• Due: 31/Oct/20
• Created: 02/Oct/20 03:56
• Updated: 08/Oct/20 23:12
• Resolved: 08/Oct/20 22:52

Description

To support FIPS, we have to use FIPS-approved algorithms. In front end, we use MD5 hash algorithms to generate query hash for lineage graph. But MD5 is one of forbidden algorithms for FIPS. We have to replace MD5 with FIPS-approved algorithm, or non-cryptographic hash function like murmur3_128. 

We might need to figure out if there are external dependencies on the hash. e.g. the lineage graph was consumed by other component services, like Apache Atlas, and maybe they somehow rely on the hash being consistent across versions (seems unlikely).