Migration guide from MD5 to SHA2/SHA3 algorithm

Overview

We will stop supporting the MD5 algorithm in our platform and impacted merchants will have to switch to SHA. The decommissioning will be carried out in two stages, having the deadline for the first phase on 15th of August, 2024 and the deadline for the second phase on 15th of October, 2024.

Availability

Areas in which MD5 will no longer be available are the following:

Phase One (deadline: 15th of August)

• API
• Webhooks (IPN and LCN)
• Shopping cart integrations
• Electronic delivery
• Buy links generated using MD5 hash

Phase Two (deadline: 15th of October)

• Finish page (BACK_REF parameter)
• Instant Notification Service (INS)
• Instant Refund Notification (IRN)
• Instant Delivery Notification (IDN)
• Instant Order Search Export (ISE)

Benefits

• Keeping up to date with technical security advancements.
• Increasing the security for authentication and removing potential security breaches.
• Secure and robust while being compatible with the existing algorithms in terms of the number of bits and representation size​