AWS AmazonS3 documentation change
Summary
Added four new checksum algorithms (XXHash64, XXHash3, XXHash128, SHA-512) to the list and updated note about MD5 checksum usage with clarification about precalculated checksums and multipart uploads.
Security assessment
This change updates general checksum documentation to include new algorithms and clarify MD5 usage patterns. While checksums are security-related for data integrity, there's no evidence this addresses a specific security vulnerability. The change adds documentation about security features but doesn't indicate a security issue was fixed.
Diff
diff --git a/AmazonS3/latest/userguide/checking-object-integrity.md b/AmazonS3/latest/userguide/checking-object-integrity.md index b2af88b24..2d58748c6 100644 --- a//AmazonS3/latest/userguide/checking-object-integrity.md +++ b//AmazonS3/latest/userguide/checking-object-integrity.md @@ -29 +29,5 @@ The `CRC64NVME` checksum algorithm is the default checksum algorithm used for ch -###### Note + * XXHash64 (`XXHASH64`) + + * XXHash3 (`XXHASH3`) + + * XXHash128 (`XXHASH128`) @@ -31 +35 @@ The `CRC64NVME` checksum algorithm is the default checksum algorithm used for ch -For multipart uploads, the Compute checksum operation provides full object checksum values using `MD5`, which isn’t possible during uploads. For single part uploads, the `content-MD5 header` is only available using the S3 ETag for objects and must use SSE-S3 encryption. + * SHA-512 (`SHA512`) @@ -35,0 +40,4 @@ For multipart uploads, the Compute checksum operation provides full object check +###### Note + +You can provide a precalculated MD5 checksum using the `x-amz-checksum-md5` header. AWS SDKs do not automatically calculate MD5 checksums. For multipart uploads, the Compute checksum operation in S3 Batch Operations can calculate full object MD5 checksums for objects at rest. The legacy `Content-MD5` header remains available for single part uploads using SSE-S3 encryption. +