[
https://issues.apache.org/jira/browse/JENA-1812?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17021088#comment-17021088
]
ASF subversion and git services commented on JENA-1812:
-------------------------------------------------------
Commit ad49bf4e9a9688f3952c47698cfb19dd6bd16fb5 in jena's branch
refs/heads/master from Andy Seaborne
[ https://gitbox.apache.org/repos/asf?p=jena.git;h=ad49bf4 ]
JENA-1812: Commons Codec 1.14
> Migrate blank node hash algorithm from MD5 to SHA-256
> -----------------------------------------------------
>
> Key: JENA-1812
> URL: https://issues.apache.org/jira/browse/JENA-1812
> Project: Apache Jena
> Issue Type: Improvement
> Components: ARQ
> Reporter: Nicolas Seydoux
> Assignee: Andy Seaborne
> Priority: Trivial
> Labels: easyfix
> Fix For: Jena 3.15.0
>
> Original Estimate: 5m
> Time Spent: 1h 50m
> Remaining Estimate: 0h
>
> MD5 is a deprecated hashing algorithm, and even though it is not used on
> sensitive data in the context of Jena, its usage is picked up by security
> softwares as a security flaw. This may reduce the incentive to use Jena in
> commercial products, and computing SHA-256 hashes is not prohibitively more
> expensive than MD5.
>
> Therefore, I suggest to migrate from using MD5 hashes to SHA-256.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
