diff options
| author | Paul Kehrer <paul.l.kehrer@gmail.com> | 2013-11-13 11:59:36 -0800 |
|---|---|---|
| committer | Paul Kehrer <paul.l.kehrer@gmail.com> | 2013-11-13 11:59:36 -0800 |
| commit | aecee6fac67d0736743c4519e455def7315d2c6b (patch) | |
| tree | d070198bf0eb968649ab30e94181e9585a360df3 /docs/hazmat | |
| parent | 2d45bc3295c62e09dd06f19e206735e374bddd61 (diff) | |
| parent | 9480129db921e84253d3b2a8c8e8becb5f8934b3 (diff) | |
| download | cryptography-aecee6fac67d0736743c4519e455def7315d2c6b.tar.gz cryptography-aecee6fac67d0736743c4519e455def7315d2c6b.tar.bz2 cryptography-aecee6fac67d0736743c4519e455def7315d2c6b.zip | |
Merge pull request #257 from alex/hashes-break
Describe that hashes get real broken over time
Diffstat (limited to 'docs/hazmat')
| -rw-r--r-- | docs/hazmat/primitives/cryptographic-hashes.rst | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/docs/hazmat/primitives/cryptographic-hashes.rst b/docs/hazmat/primitives/cryptographic-hashes.rst index 20fa23cf..e7b4f2d6 100644 --- a/docs/hazmat/primitives/cryptographic-hashes.rst +++ b/docs/hazmat/primitives/cryptographic-hashes.rst @@ -27,6 +27,12 @@ Message Digests >>> digest.finalize() 'l\xa1=R\xcap\xc8\x83\xe0\xf0\xbb\x10\x1eBZ\x89\xe8bM\xe5\x1d\xb2\xd29%\x93\xafj\x84\x11\x80\x90' + Keep in mind that attacks against cryptographic hashes only get stronger + with time, and that often algorithms that were once thought to be strong, + become broken. Because of this it's important to include a plan for + upgrading the hash algorithm you use over time. For more information, see + `Lifetimes of cryptographic hash functions`_. + .. method:: update(data) :param bytes data: The bytes you wish to hash. @@ -109,3 +115,6 @@ MD5 MD5 is a deprecated cryptographic hash function. It has a 128-bit message digest and has practical known collision attacks. + + +.. _`Lifetimes of cryptographic hash functions`: http://valerieaurora.org/hash.html |