-
Notifications
You must be signed in to change notification settings - Fork 6
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Switch from MD5 to BLAKE3? #3
Comments
Holy shit, RustCrypto as library is very ancient and currently deprecated so I definetely take care of this. |
MD5 was selected specifically because Erlang (and therefor pleroma) can do it natively. The security really doesn't matter that much here, because these are only alive for about a minute before becoming invalid, while using MD5 makes it easy to implement for whoever is using the service. |
Alright, I will keep MD5 then. |
What about something like SHA-256? |
Seems that erlang does support this one, but the change has to be backwards compatible somehow. |
The BLAKE3 is a far more faster and better security. It will be a good replacement for MD5.
The text was updated successfully, but these errors were encountered: