Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Deprecate old and unsafe algorithms #143

Merged
merged 3 commits into from
Jan 27, 2023
Merged

Deprecate old and unsafe algorithms #143

merged 3 commits into from
Jan 27, 2023

Conversation

wussler
Copy link
Contributor

@wussler wussler commented Jan 25, 2023

  • Drop support for MD5, RIPEMD160 for both signature creation and verification.
  • Deprecate SHA1, CAST5, 3DES, they can no longer be used to sign or encrypt but still verify or decrypt

@wussler wussler force-pushed the deprecate-obsolete branch from dd20242 to 16dfff0 Compare January 25, 2023 12:38
@wussler wussler marked this pull request as ready for review January 25, 2023 12:59
twiss
twiss reviewed Jan 25, 2023
View reviewed changes
openpgp/packet/packet.go Outdated Show resolved Hide resolved
openpgp/packet/symmetrically_encrypted_aead.go Outdated Show resolved Hide resolved
@twiss twiss merged commit 8796b99 into main Jan 27, 2023
@twiss twiss deleted the deprecate-obsolete branch January 27, 2023 14:46
@tri-adam tri-adam mentioned this pull request Feb 2, 2023
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@twiss twiss twiss approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@wussler @twiss