[
https://issues.apache.org/jira/browse/JENA-1812?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andy Seaborne updated JENA-1812:
--------------------------------
Fix Version/s: (was: Jena 3.14.0)
Jena 3.15.0
> Migrate blank node hash algorithm from MD5 to SHA-256
> -----------------------------------------------------
>
> Key: JENA-1812
> URL: https://issues.apache.org/jira/browse/JENA-1812
> Project: Apache Jena
> Issue Type: Improvement
> Components: ARQ
> Reporter: Nicolas Seydoux
> Assignee: Andy Seaborne
> Priority: Trivial
> Labels: easyfix
> Fix For: Jena 3.15.0
>
> Original Estimate: 5m
> Time Spent: 50m
> Remaining Estimate: 0h
>
> MD5 is a deprecated hashing algorithm, and even though it is not used on
> sensitive data in the context of Jena, its usage is picked up by security
> softwares as a security flaw. This may reduce the incentive to use Jena in
> commercial products, and computing SHA-256 hashes is not prohibitively more
> expensive than MD5.
>
> Therefore, I suggest to migrate from using MD5 hashes to SHA-256.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
