https://github.com/python/cpython/commit/5ab628fc652b64a84c2e8fb3897fdc93b47f48f5 commit: 5ab628fc652b64a84c2e8fb3897fdc93b47f48f5 branch: 3.13 author: Miss Islington (bot) <31488909+miss-isling...@users.noreply.github.com> committer: gpshead <g...@krypto.org> date: 2025-04-20T01:12:26Z summary:
[3.13] gh-129327: revise hashlib documentation to account for FIPS removing sha1 (GH-132729) (#132740) gh-129327: revise hashlib documentation to account for FIPS removing sha1 (GH-132729) * gh-129327: revise hashlib documentation to account for FIPS removing sha1 More generally, the current documentation is a bit scattered, talking about what terms are "equal" despite those terms not being very interesting and given the term "secure hash", probably wrong (because md5 and sha1 are not secure anymore). Let's talk about cryptographically secure instead, and note that two of them aren't. And then we can also link to the source for NIST going through the removal process for SHA1. * Add Gregors Suggestion * Clean up --------- (cherry picked from commit a16586c9e7a9accfe26489191b5b1ee39657ee5b) Co-authored-by: Stan Ulbrych <89152624+stanfromirel...@users.noreply.github.com> Co-authored-by: Eli Schwartz <eschwa...@gentoo.org> files: M Doc/library/hashlib.rst diff --git a/Doc/library/hashlib.rst b/Doc/library/hashlib.rst index dffb167c74771f..7bf6152311f058 100644 --- a/Doc/library/hashlib.rst +++ b/Doc/library/hashlib.rst @@ -20,13 +20,11 @@ -------------- -This module implements a common interface to many different secure hash and -message digest algorithms. Included are the FIPS secure hash algorithms SHA1, -SHA224, SHA256, SHA384, SHA512, (defined in `the FIPS 180-4 standard`_), -the SHA-3 series (defined in `the FIPS 202 standard`_) as well as RSA's MD5 -algorithm (defined in internet :rfc:`1321`). The terms "secure hash" and -"message digest" are interchangeable. Older algorithms were called message -digests. The modern term is secure hash. +This module implements a common interface to many different hash algorithms. +Included are the FIPS secure hash algorithms SHA224, SHA256, SHA384, SHA512, +(defined in `the FIPS 180-4 standard`_), the SHA-3 series (defined in `the FIPS +202 standard`_) as well as the legacy algorithms SHA1 (`formerly part of FIPS`_) +and the MD5 algorithm (defined in internet :rfc:`1321`). .. note:: @@ -812,6 +810,7 @@ Domain Dedication 1.0 Universal: .. _the FIPS 180-4 standard: https://csrc.nist.gov/pubs/fips/180-4/upd1/final .. _the FIPS 202 standard: https://csrc.nist.gov/pubs/fips/202/final .. _HACL\* project: https://github.com/hacl-star/hacl-star +.. _formerly part of FIPS: https://csrc.nist.gov/news/2023/decision-to-revise-fips-180-4 .. _hashlib-seealso: _______________________________________________ Python-checkins mailing list -- python-checkins@python.org To unsubscribe send an email to python-checkins-le...@python.org https://mail.python.org/mailman3/lists/python-checkins.python.org/ Member address: arch...@mail-archive.com
