From 500047b1c3cbfbd8f4ad6f52865ed98cd59fecb3 Mon Sep 17 00:00:00 2001 From: Alex Gaynor Date: Thu, 23 Feb 2017 13:57:55 -0500 Subject: SHA-1 is broken, run for the hills (#3417) --- docs/hazmat/primitives/cryptographic-hashes.rst | 31 +++++++++++++------------ 1 file changed, 16 insertions(+), 15 deletions(-) (limited to 'docs') diff --git a/docs/hazmat/primitives/cryptographic-hashes.rst b/docs/hazmat/primitives/cryptographic-hashes.rst index 34d88bcc..d3e9eb4d 100644 --- a/docs/hazmat/primitives/cryptographic-hashes.rst +++ b/docs/hazmat/primitives/cryptographic-hashes.rst @@ -79,21 +79,6 @@ Message digests .. _cryptographic-hash-algorithms: -SHA-1 -~~~~~ - -.. attention:: - - NIST has deprecated SHA-1 in favor of the SHA-2 variants. New applications - are strongly suggested to use SHA-2 over SHA-1. - -.. class:: SHA1() - - SHA-1 is a cryptographic hash function standardized by NIST. It produces an - 160-bit message digest. Cryptanalysis of SHA-1 has demonstrated that it is - vulnerable to practical collision attacks, though no actual collisions are - publicly known. - SHA-2 family ~~~~~~~~~~~~ @@ -149,6 +134,22 @@ SHA-family of hashes. :raises ValueError: If the ``digest_size`` is invalid. +SHA-1 +~~~~~ + +.. warning:: + + SHA-1 is a deprecated hash algorithm that has practical known collision + attacks. You are strongly discouraged from using it. Existing applications + should strongly consider moving away. + +.. class:: SHA1() + + SHA-1 is a cryptographic hash function standardized by NIST. It produces an + 160-bit message digest. Cryptanalysis of SHA-1 has demonstrated that it is + vulnerable to practical collision attacks, and collisions have been + demonstrated. + RIPEMD160 ~~~~~~~~~ -- cgit v1.2.3