Increase MD5 cnonce length to 16 bytes for full 128-bit entropy

apache · Nov 3, 2024 · 4da0d60 · 4da0d60
1 parent a4a3930
commit 4da0d60
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/httpclient5/src/main/java/org/apache/hc/client5/http/impl/auth/DigestScheme.java b/httpclient5/src/main/java/org/apache/hc/client5/http/impl/auth/DigestScheme.java
@@ -556,7 +556,7 @@ static byte[] createCnonce(final String algorithm) {
                 break;
             case "MD5":
             default:
-                length = 8;
+                length = 16;
                 break;
         }
         final byte[] tmp = new byte[length];