[issue15468] Edit docs to hide hashlib.md5()

Changes by Gregory P. Smith : -- resolution: -> fixed stage: patch review -> resolved status: open -> closed ___ Python tracker ___

[issue15468] Edit docs to hide hashlib.md5()

Roundup Robot added the comment: New changeset 1cfd627bee05 by Gregory P. Smith in branch 'default': Clarify that md5 is in the algorithms_guaranteed list despite what https://hg.python.org/cpython/rev/1cfd627bee05 -- ___ Python tracker

[issue15468] Edit docs to hide hashlib.md5()

Roundup Robot added the comment: New changeset 13ea0a1d7dde by Gregory P. Smith in branch 'default': issue15468 - use sha256 instead of md5 or sha1 in the examples. https://hg.python.org/cpython/rev/13ea0a1d7dde -- nosy: +python-dev ___ Python

[issue15468] Edit docs to hide hashlib.md5()

Berker Peksag added the comment: The looks good to me in general, but I'd suggest to refer to the new algorithms_guaranteed and algorithms_available attributes in the following paragraph: +:func:`sha512`. The :func:`md5` is typically available, but will be missing if +Python has been

[issue15468] Edit docs to hide hashlib.md5()

Daniel Holth added the comment: re-tweak treatment of md5 in hashlib docs (the SHA-2 family is currently recommended by http://csrc.nist.gov/groups/ST/toolkit/secure_hashing.html) -- Added file: http://bugs.python.org/file26648/hashlib.patch ___

[issue15468] Edit docs to hide hashlib.md5()

Changes by Christian Heimes li...@cheimes.de: -- nosy: +christian.heimes ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue15468 ___ ___

[issue15468] Edit docs to hide hashlib.md5()

Daniel Holth added the comment: Taking a second look it is pretty good. The only other thing that might be worth mentioning explicitly is that the always present hashes don't actually use OpenSSL. Constructors for hash algorithms that are always present in this module are md5(), sha1(),

[issue15468] Edit docs to hide hashlib.md5()

Gregory P. Smith added the comment: The always present hashes do use openssl if the openssl version hashlib was compiled against supports them. otherwise it falls back to the builtin C implementations. -- ___ Python tracker rep...@bugs.python.org

[issue15468] Edit docs to hide hashlib.md5()

Derek Wilson added the comment: Attached patch mentioning availability of md5 under FIPS compliance and the use of OpenSSL algorithms when available and altering the initial example to use sha1 instead of md5. -- keywords: +patch nosy: +Derek.Wilson Added file:

[issue15468] Edit docs to hide hashlib.md5()

New submission from Daniel Holth dho...@fastmail.fm: md5() has been obsolete since 1996. It has no place as the first item in hashlib's list of guaranteed to be available hashes, and it doesn't work when Python has been compiled to be FIPS-compliant. The documentation should be edited to make

[issue15468] Edit docs to hide hashlib.md5()

Changes by Éric Araujo mer...@netwok.org: -- nosy: +eric.araujo, gregory.p.smith ___ Python tracker rep...@bugs.python.org http://bugs.python.org/issue15468 ___ ___

[issue15468] Edit docs to hide hashlib.md5()

Gregory P. Smith g...@krypto.org added the comment: The only edit that is needed is for md5 to be documented as unavailable when Python has been compiled in FIPS-compliant mode. Most of the world does not and will never use that mode. md5 is still a perfectly good algorithm for many uses and

[issue15468] Edit docs to hide hashlib.md5()

Daniel Holth dho...@fastmail.fm added the comment: Not to mention its continued popularity as a password hash, surpassed only by double-rot13. You've convinced me, it is reasonable to continue to support, nay, recommend md5 for the non-FIPS world. This hash function continues to have raving

[issue15468] Edit docs to hide hashlib.md5()

Antoine Pitrou pit...@free.fr added the comment: The hashlib doc starts with Warning: Some algorithms have known hash collision weaknesses, see the FAQ at the end (the FAQ at the end is a link to a Wikipedia article). The sentence Included are the FIPS secure hash algorithms SHA1, SHA224,