Question: md5 is not fips compliant?
Answer: The MD5 checksum is used to detect whether messages have been changed since the checksums were generated. Checksums, or hash algorithms, are governed by the FIPS 180-3, Secure Hash Standard. In FIPS 180-3, MD5 is not an approved hash algorithm. Accordingly, the U.S. government cannot use it.