Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Replace MD5 with SHA256 #2117

Merged
merged 4 commits into from
Sep 10, 2023
Merged

Replace MD5 with SHA256 #2117

merged 4 commits into from
Sep 10, 2023

Conversation

kmaschke85
Copy link

As pointed out in #2116 , usage of MD5 is not recommended anymore and may be flagged as vulnerability in penetration testing.
This PR simply uses SHA256 instead of MD5 for generating the storage hashes, by utilizing existing functionality from CommonCrypto and CryptoKit.

@onevcat onevcat changed the base branch from master to v8 July 28, 2023 14:06
@onevcat
Copy link
Owner

onevcat commented Jul 28, 2023

This changes the cache key for all disk cache which can cause all cache invalidated. So please let me switch the base branch to v8, as planned along with some other upcoming breaking changes.

@kmaschke85
Copy link
Author

Sure, no problem!

@kmaschke85
Copy link
Author

Any plans when v8 could be released? @onevcat

@onevcat onevcat merged commit 402fe7d into onevcat:v8 Sep 10, 2023
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants