diff options
| author | Jan Pokorn? <jpokorny@redhat.com> | 2012-03-01 00:56:41 +0100 |
|---|---|---|
| committer | Jan Pokorn? <jpokorny@redhat.com> | 2012-03-01 00:56:41 +0100 |
| commit | 531c568bd89a2e34ca3077314587e421c5867091 (patch) | |
| tree | 94e49f7de971ab53008570da0c217aadadb0fe46 /docs/_static/paste.css | |
| parent | 1b75bb83f7e4a4f1ffd7d51e1b2a58469373de0d (diff) | |
| download | paste-531c568bd89a2e34ca3077314587e421c5867091.tar.gz | |
auth/auth_tkt.py: enable overriding digest algorithms
Currently, mod_auth_tkt supports also SHA256 and SHA 512 [1],
not just plain MD5. Quoting:
----v----
The default is MD5, which is faster, but has now been shown to be vulnerable
to collision attacks. Such attacks are not directly applicable to
mod_auth_tkt, which primarily relies on the security of the shared secret
rather than the strength of the hashing scheme. More paranoid users will
probably prefer to use one of the SHA digest types, however.
The default is likely to change in a future version, so setting the digest
type explicitly is encouraged.
----^----
Thus, enable it also in this implementation so one can optionally switch
to a stronger secure hash.
Backward compatibility should be untouched as ``md`` is being passed
as a default kwarg. The only change affecting external world is
a new parameter required at ``calculate digest`` (specifying the
digest to use), but as it has probably no use outside the module,
this is a non-issue. Alternatively: another optional kwarg.
[1] http://linux.die.net/man/3/mod_auth_tkt
Diffstat (limited to 'docs/_static/paste.css')
0 files changed, 0 insertions, 0 deletions
