From: Simon Josefsson Date: Fri, 4 Feb 2011 08:04:10 +0000 (+0100) Subject: Fix MD2 documentation. X-Git-Tag: gnutls_2_99_0~336 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=962013fa4b5c1da7a39e5249e146e80f8ca6a7ed;p=thirdparty%2Fgnutls.git Fix MD2 documentation. Suggested by "brian m. carlson" in debian bug #464625. --- diff --git a/doc/cha-ciphersuites.texi b/doc/cha-ciphersuites.texi index e0fad2218f..1b2c2116b3 100644 --- a/doc/cha-ciphersuites.texi +++ b/doc/cha-ciphersuites.texi @@ -18,9 +18,8 @@ hash algorithm. @item MD2 MD2 is a cryptographic hash algorithm designed by Ron Rivest. It is -optimized for 8-bit processors. Outputs 128 bits of data. There are -no known weaknesses of this algorithm but since this algorithm is -rarely used and not really studied it should not be used today. +optimized for 8-bit processors. Outputs 128 bits of data. There are +several known weaknesses of this algorithm and it should not be used. @item MD5 MD5 is a cryptographic hash algorithm designed by Ron Rivest. Outputs diff --git a/doc/signatures.texi b/doc/signatures.texi index 7ad761f2ed..32e1013155 100644 --- a/doc/signatures.texi +++ b/doc/signatures.texi @@ -75,10 +75,12 @@ The supported cryptographic hash algorithms are: @table @code @item MD2 -MD2 is a cryptographic hash algorithm designed by Ron Rivest. It is -optimized for 8-bit processors. Outputs 128 bits of data. There are no -known weaknesses of this algorithm but since this algorithm is rarely -used and not really studied it should not be used today. +MD2 is a cryptographic hash algorithm designed by Ron Rivest. It is +optimized for 8-bit processors. Outputs 128 bits of data. There are +several known weaknesses of this algorithm and it should not be used. +Unfortunately some CA certificates signed with RSA-MD2 are still in +use, but this is acceptable because the RSA-MD2 signature is not +involved in certificate validation. @item MD5 MD5 is a cryptographic hash algorithm designed by Ron Rivest. Outputs