Remove weak MD5 cryptograhic primitive usage to complay with newer CWE

The security team will soon start having the code owners address also CWE (Common Weakness Enumeration). Although this is not a CVE per se it may have security ramifications.

This issue addresses weak MD5 primitive usages in CMO. 

https://cwe.mitre.org/data/definitions/1240.html