======================================================================ERROR: test_case_md5_0 (test.test_hashlib.HashLibTestCase.test_case_md5_0)----------------------------------------------------------------------Traceback (most recent call last):  File "/home/vstinner/cpython/Lib/test/test_hashlib.py", line 547, in test_case_md5_0    self.check(    ~~~~~~~~~~^        'md5', b'', 'd41d8cd98f00b204e9800998ecf8427e',        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^        usedforsecurity=False        ^^^^^^^^^^^^^^^^^^^^^    )    ^  File "/home/vstinner/cpython/Lib/test/test_hashlib.py", line 427, in check    self.check_file_digest(name, data, hexdigest)    ~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^  File "/home/vstinner/cpython/Lib/test/test_hashlib.py", line 447, in check_file_digest    hashlib.file_digest(buf, digest).hexdigest(), hexdigest    ~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^  File "/home/vstinner/cpython/Lib/hashlib.py", line 211, in file_digest    digestobj = digest()ValueError: [digital envelope routines: EVP_DigestInit_ex] disabled for FIPS======================================================================ERROR: test_case_md5_1 (test.test_hashlib.HashLibTestCase.test_case_md5_1)----------------------------------------------------------------------Traceback (most recent call last):  File "/home/vstinner/cpython/Lib/test/test_hashlib.py", line 553, in test_case_md5_1    self.check(    ~~~~~~~~~~^        'md5', b'abc', '900150983cd24fb0d6963f7d28e17f72',        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^        usedforsecurity=False        ^^^^^^^^^^^^^^^^^^^^^    )    ^  File "/home/vstinner/cpython/Lib/test/test_hashlib.py", line 427, in check    self.check_file_digest(name, data, hexdigest)    ~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^  File "/home/vstinner/cpython/Lib/test/test_hashlib.py", line 447, in check_file_digest    hashlib.file_digest(buf, digest).hexdigest(), hexdigest    ~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^  File "/home/vstinner/cpython/Lib/hashlib.py", line 211, in file_digest    digestobj = digest()ValueError: [digital envelope routines: EVP_DigestInit_ex] disabled for FIPS======================================================================ERROR: test_case_md5_2 (test.test_hashlib.HashLibTestCase.test_case_md5_2)----------------------------------------------------------------------Traceback (most recent call last):  File "/home/vstinner/cpython/Lib/test/test_hashlib.py", line 559, in test_case_md5_2    self.check(    ~~~~~~~~~~^        'md5',        ^^^^^^    ...<2 lines>...        usedforsecurity=False        ^^^^^^^^^^^^^^^^^^^^^    )    ^  File "/home/vstinner/cpython/Lib/test/test_hashlib.py", line 427, in check    self.check_file_digest(name, data, hexdigest)    ~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^  File "/home/vstinner/cpython/Lib/test/test_hashlib.py", line 447, in check_file_digest    hashlib.file_digest(buf, digest).hexdigest(), hexdigest    ~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^  File "/home/vstinner/cpython/Lib/hashlib.py", line 211, in file_digest    digestobj = digest()ValueError: [digital envelope routines: EVP_DigestInit_ex] disabled for FIPS----------------------------------------------------------------------

[vstinner@python-builder-rhel8-fips cpython]$ ./python Python 3.14.0a2+ (heads/pr/127492:3f9ec82db, Dec  5 2024, 06:10:34) [GCC 8.5.0 20210514 (Red Hat 8.5.0-22)] on linuxType "help", "copyright", "credits" or "license" for more information.>>> import hashlib>>> hashlib.md5(usedforsecurity=False).hexdigest()'d41d8cd98f00b204e9800998ecf8427e'

diff --git a/Lib/hashlib.py b/Lib/hashlib.pyindex 44656c33a..93d602571 100644--- a/Lib/hashlib.py+++ b/Lib/hashlib.py@@ -192,7 +192,7 @@ def __hash_new(name, data=b'', **kwargs):     pass-def file_digest(fileobj, digest, /, *, _bufsize=2**18):+def file_digest(fileobj, digest, /, *, usedforsecurity=True, _bufsize=2**18):     """Hash the contents of a file-like object. Returns a digest object.      *fileobj* must be a file-like object opened for reading in binary mode.@@ -206,9 +206,9 @@ def file_digest(fileobj, digest, /, *, _bufsize=2**18):     # On Linux we could use AF_ALG sockets and sendfile() to archive zero-copy     # hashing with hardware acceleration.     if isinstance(digest, str):-        digestobj = new(digest)+        digestobj = new(digest, usedforsecurity=usedforsecurity)     else:-        digestobj = digest()+        digestobj = digest(usedforsecurity=usedforsecurity)      if hasattr(fileobj, "getbuffer"):         # io.BytesIO object, use zero-copy bufferdiff --git a/Lib/test/test_hashlib.py b/Lib/test/test_hashlib.pyindex 1c1a0396c..a7cca0ba5 100644--- a/Lib/test/test_hashlib.py+++ b/Lib/test/test_hashlib.py@@ -443,11 +443,13 @@ def check_file_digest(self, name, data, hexdigest):             for digest in digests:                 buf = io.BytesIO(data)                 buf.seek(0)-                self.assertEqual(-                    hashlib.file_digest(buf, digest).hexdigest(), hexdigest-                )+                digestobj = hashlib.file_digest(buf, digest,+                                                usedforsecurity=False)+                self.assertEqual(digestobj.hexdigest(), hexdigest)+                 with open(os_helper.TESTFN, "rb") as f:-                    digestobj = hashlib.file_digest(f, digest)+                    digestobj = hashlib.file_digest(f, digest,+                                                    usedforsecurity=False)                 self.assertEqual(digestobj.hexdigest(), hexdigest)         finally:             os.unlink(os_helper.TESTFN)

buf=io.BytesIO(b"somedata")mac1=hmac.HMAC(b"key",digestmod=hashlib.sha512)digest=hashlib.file_digest(buf,lambda:mac1)