]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.13] gh-129327: revise hashlib documentation to account for FIPS removing sha1...
authorMiss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Sun, 20 Apr 2025 01:12:26 +0000 (03:12 +0200)
committerGitHub <noreply@github.com>
Sun, 20 Apr 2025 01:12:26 +0000 (01:12 +0000)
commit5ab628fc652b64a84c2e8fb3897fdc93b47f48f5
treed806d4c1afb1982d283f1e3f67b2151acb5a6aed
parent47c8df6172db4fc4b10d0a500d9a4bfffa5d751f
[3.13] gh-129327: revise hashlib documentation to account for FIPS removing sha1 (GH-132729) (#132740)

gh-129327: revise hashlib documentation to account for FIPS removing sha1 (GH-132729)

* gh-129327: revise hashlib documentation to account for FIPS removing sha1

More generally, the current documentation is a bit scattered, talking
about what terms are "equal" despite those terms not being very
interesting and given the term "secure hash", probably wrong (because
md5 and sha1 are not secure anymore).

Let's talk about cryptographically secure instead, and note that two of
them aren't. And then we can also link to the source for NIST going
through the removal process for SHA1.

* Add Gregors Suggestion

* Clean up

---------
(cherry picked from commit a16586c9e7a9accfe26489191b5b1ee39657ee5b)

Co-authored-by: Stan Ulbrych <89152624+StanFromIreland@users.noreply.github.com>
Co-authored-by: Eli Schwartz <eschwartz@gentoo.org>
Doc/library/hashlib.rst