aboutsummaryrefslogtreecommitdiffstats
path: root/docs/hazmat
diff options
context:
space:
mode:
authorAlex Gaynor <alex.gaynor@gmail.com>2013-11-13 10:33:01 -0800
committerAlex Gaynor <alex.gaynor@gmail.com>2013-11-13 10:33:01 -0800
commit9480129db921e84253d3b2a8c8e8becb5f8934b3 (patch)
tree99f7fd7ca1e760e9d8ecb18fd8c959f91cc22b63 /docs/hazmat
parent4826ec6e7602a3d2bca687afadb97a04a5e85ff2 (diff)
downloadcryptography-9480129db921e84253d3b2a8c8e8becb5f8934b3.tar.gz
cryptography-9480129db921e84253d3b2a8c8e8becb5f8934b3.tar.bz2
cryptography-9480129db921e84253d3b2a8c8e8becb5f8934b3.zip
Describe that hashes get real broken over time
Diffstat (limited to 'docs/hazmat')
-rw-r--r--docs/hazmat/primitives/cryptographic-hashes.rst9
1 files changed, 9 insertions, 0 deletions
diff --git a/docs/hazmat/primitives/cryptographic-hashes.rst b/docs/hazmat/primitives/cryptographic-hashes.rst
index 20fa23cf..e7b4f2d6 100644
--- a/docs/hazmat/primitives/cryptographic-hashes.rst
+++ b/docs/hazmat/primitives/cryptographic-hashes.rst
@@ -27,6 +27,12 @@ Message Digests
>>> digest.finalize()
'l\xa1=R\xcap\xc8\x83\xe0\xf0\xbb\x10\x1eBZ\x89\xe8bM\xe5\x1d\xb2\xd29%\x93\xafj\x84\x11\x80\x90'
+ Keep in mind that attacks against cryptographic hashes only get stronger
+ with time, and that often algorithms that were once thought to be strong,
+ become broken. Because of this it's important to include a plan for
+ upgrading the hash algorithm you use over time. For more information, see
+ `Lifetimes of cryptographic hash functions`_.
+
.. method:: update(data)
:param bytes data: The bytes you wish to hash.
@@ -109,3 +115,6 @@ MD5
MD5 is a deprecated cryptographic hash function. It has a 128-bit message
digest and has practical known collision attacks.
+
+
+.. _`Lifetimes of cryptographic hash functions`: http://valerieaurora.org/hash.html