Upgrade from MD5 to SHA2/SHA3 algorithm

Overview

We will stop supporting the MD5 algorithm on our platform, and impacted merchants will need to switch to SHA. The decommissioning will be carried out in two stages, with deadlines for the first phase on August 15, 2024, and for the second phase on June 30, 2025.

Availability

1

Phase One (deadline: 15th of August, 2024)

Areas affected:

• API

• Webhooks (IPN and LCN)

• Shopping cart integrations

• Electronic delivery

• Buy links generated using MD5 hash

2

Phase Two (deadline: 30th of June, 2025)

Areas affected:

• Finish page (BACK_REF parameter)

• Instant Notification Service (INS)

• Instant Refund Notification (IRN)

• Instant Delivery Notification (IDN)

• Instant Order Search Export (ISE)

Benefits

• Keeping up to date with technical security advancements.

• Increasing the security for authentication and removing potential security breaches.

• Secure and robust while being compatible with the existing algorithms in terms of the number of bits and representation size​

Keep posted on the latest updates in the 2Checkout Control Panel and in this article for transitioning to the SHA algorithm.

Related resources:

• Buy links upgrade to the SHA algorithm

• Electronic delivery of codes upgrade to the SHA algorithm

• Prefill customer data in order forms