Fix MD2 documentation.

Suggested by "brian m. carlson" <sandals@crustytoothpaste.net> in
debian bug #464625.

diff --git a/doc/cha-ciphersuites.texi b/doc/cha-ciphersuites.texi
index e0fad2218f313030bf6a2e1e96a8f506a0859b59..1b2c2116b3ccff8851ab4298b65f3169b79c03e0 100644 (file)
--- a/doc/cha-ciphersuites.texi
+++ b/doc/cha-ciphersuites.texi
@@ -18,9 +18,8 @@ hash algorithm.
 
 @item MD2
 MD2 is a cryptographic hash algorithm designed by Ron Rivest.  It is
-optimized for 8-bit processors. Outputs 128 bits of data.  There are
-no known weaknesses of this algorithm but since this algorithm is
-rarely used and not really studied it should not be used today.
+optimized for 8-bit processors.  Outputs 128 bits of data.  There are
+several known weaknesses of this algorithm and it should not be used.
 
 @item MD5
 MD5 is a cryptographic hash algorithm designed by Ron Rivest. Outputs

diff --git a/doc/signatures.texi b/doc/signatures.texi
index 7ad761f2ed1041808d1d2ca9393205d565270c39..32e10131555dd90f08ab9db8068aeb74dd3f4f3c 100644 (file)
--- a/doc/signatures.texi
+++ b/doc/signatures.texi
@@ -75,10 +75,12 @@ The supported cryptographic hash algorithms are:
 
 @table @code
 @item MD2
-MD2 is a cryptographic hash algorithm designed by Ron Rivest. It is
-optimized for 8-bit processors. Outputs 128 bits of data. There are no
-known weaknesses of this algorithm but since this algorithm is rarely
-used and not really studied it should not be used today.
+MD2 is a cryptographic hash algorithm designed by Ron Rivest.  It is
+optimized for 8-bit processors.  Outputs 128 bits of data.  There are
+several known weaknesses of this algorithm and it should not be used.
+Unfortunately some CA certificates signed with RSA-MD2 are still in
+use, but this is acceptable because the RSA-MD2 signature is not
+involved in certificate validation.
 
 @item MD5
 MD5 is a cryptographic hash algorithm designed by Ron Rivest. Outputs