saymrwulf/cryptography
1
0
Fork 0
mirror of https://github.com/saymrwulf/cryptography.git synced 2026-05-14 20:37:55 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

SHA-1 is broken, run for the hills (#3417)

Browse source
This commit is contained in:
Alex Gaynor 2017-02-23 13:57:55 -05:00 committed by Paul Kehrer
parent 9a59ad87f6
commit 500047b1c3
1 changed files with 16 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

31
docs/hazmat/primitives/cryptographic-hashes.rst
View file

@ -79,21 +79,6 @@ Message digests
.. _cryptographic-hash-algorithms:
SHA-1
~~~~~
.. attention::
NIST has deprecated SHA-1 in favor of the SHA-2 variants. New applications
are strongly suggested to use SHA-2 over SHA-1.
.. class:: SHA1()
SHA-1 is a cryptographic hash function standardized by NIST. It produces an
160-bit message digest. Cryptanalysis of SHA-1 has demonstrated that it is
vulnerable to practical collision attacks, though no actual collisions are
publicly known.
SHA-2 family
~~~~~~~~~~~~
@ -149,6 +134,22 @@ SHA-family of hashes.
:raises ValueError: If the ``digest_size`` is invalid.
SHA-1
~~~~~
.. warning::
SHA-1 is a deprecated hash algorithm that has practical known collision
attacks. You are strongly discouraged from using it. Existing applications
should strongly consider moving away.
.. class:: SHA1()
SHA-1 is a cryptographic hash function standardized by NIST. It produces an
160-bit message digest. Cryptanalysis of SHA-1 has demonstrated that it is
vulnerable to practical collision attacks, and collisions have been
demonstrated.
RIPEMD160
~~~~~~~~~