[
https://issues.apache.org/jira/browse/JENA-1812?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17021089#comment-17021089
]
ASF subversion and git services commented on JENA-1812:
-------------------------------------------------------
Commit df363ef374f0b5bfa13e35101f49900120f49cf5 in jena's branch
refs/heads/master from Andy Seaborne
[ https://gitbox.apache.org/repos/asf?p=jena.git;h=df363ef ]
Merge pull request #673 from afs/jena1812-murmur3
JENA-1812: Switch to Murmur3 for blank node allocation
> Migrate blank node hash algorithm from MD5 to SHA-256
> -----------------------------------------------------
>
> Key: JENA-1812
> URL: https://issues.apache.org/jira/browse/JENA-1812
> Project: Apache Jena
> Issue Type: Improvement
> Components: ARQ
> Reporter: Nicolas Seydoux
> Assignee: Andy Seaborne
> Priority: Trivial
> Labels: easyfix
> Fix For: Jena 3.15.0
>
> Original Estimate: 5m
> Time Spent: 1h 50m
> Remaining Estimate: 0h
>
> MD5 is a deprecated hashing algorithm, and even though it is not used on
> sensitive data in the context of Jena, its usage is picked up by security
> softwares as a security flaw. This may reduce the incentive to use Jena in
> commercial products, and computing SHA-256 hashes is not prohibitively more
> expensive than MD5.
>
> Therefore, I suggest to migrate from using MD5 hashes to SHA-256.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
