[
https://issues.apache.org/jira/browse/JENA-1812?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andy Seaborne reassigned JENA-1812:
-----------------------------------
Assignee: Andy Seaborne
> Migrate blank node hash algorithm from MD5 to SHA-256
> -----------------------------------------------------
>
> Key: JENA-1812
> URL: https://issues.apache.org/jira/browse/JENA-1812
> Project: Apache Jena
> Issue Type: Improvement
> Components: ARQ
> Reporter: Nicolas Seydoux
> Assignee: Andy Seaborne
> Priority: Trivial
> Labels: easyfix
> Fix For: Jena 3.14.0
>
> Original Estimate: 5m
> Time Spent: 10m
> Remaining Estimate: 0h
>
> MD5 is a deprecated hashing algorithm, and even though it is not used on
> sensitive data in the context of Jena, its usage is picked up by security
> softwares as a security flaw. This may reduce the incentive to use Jena in
> commercial products, and computing SHA-256 hashes is not prohibitively more
> expensive than MD5.
>
> Therefore, I suggest to migrate from using MD5 hashes to SHA-256.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
