summaryrefslogtreecommitdiff
path: root/docs/_static/paste.css
diff options
context:
space:
mode:
authorJan Pokorn? <jpokorny@redhat.com>2012-03-01 00:56:41 +0100
committerJan Pokorn? <jpokorny@redhat.com>2012-03-01 00:56:41 +0100
commit531c568bd89a2e34ca3077314587e421c5867091 (patch)
tree94e49f7de971ab53008570da0c217aadadb0fe46 /docs/_static/paste.css
parent1b75bb83f7e4a4f1ffd7d51e1b2a58469373de0d (diff)
downloadpaste-531c568bd89a2e34ca3077314587e421c5867091.tar.gz
auth/auth_tkt.py: enable overriding digest algorithms
Currently, mod_auth_tkt supports also SHA256 and SHA 512 [1], not just plain MD5. Quoting: ----v---- The default is MD5, which is faster, but has now been shown to be vulnerable to collision attacks. Such attacks are not directly applicable to mod_auth_tkt, which primarily relies on the security of the shared secret rather than the strength of the hashing scheme. More paranoid users will probably prefer to use one of the SHA digest types, however. The default is likely to change in a future version, so setting the digest type explicitly is encouraged. ----^---- Thus, enable it also in this implementation so one can optionally switch to a stronger secure hash. Backward compatibility should be untouched as ``md`` is being passed as a default kwarg. The only change affecting external world is a new parameter required at ``calculate digest`` (specifying the digest to use), but as it has probably no use outside the module, this is a non-issue. Alternatively: another optional kwarg. [1] http://linux.die.net/man/3/mod_auth_tkt
Diffstat (limited to 'docs/_static/paste.css')
0 files changed, 0 insertions, 0 deletions