mirror/emacs
1
0
Fork 0
mirror of https://git.savannah.gnu.org/git/emacs.git synced 2024-11-26 07:33:47 +00:00
Code Issues Releases Activity

Warn against using the MD4 hash function

Browse Source 
* lisp/md4.el (md4): Warn against using it, since its security is
non-existent and it has been declared obsolete.  It should probably
only be used by our NTLM support.  Point users to secure-hash instead.
This commit is contained in:
Stefan Kangas 2020-10-28 02:37:18 +01:00
parent 2efff5e61c
commit 01d67bc845
1 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
lisp/md4.el
View File

@ -22,6 +22,16 @@
;; You should have received a copy of the GNU General Public License ;; You should have received a copy of the GNU General Public License
;; along with GNU Emacs. If not, see <https://www.gnu.org/licenses/>. ;; along with GNU Emacs. If not, see <https://www.gnu.org/licenses/>.
;;; Commentary:
;; The MD4 Message-Digest Algorithm.
;;
;; The security of the MD4 hashing algorithm is very poor to
;; non-existent. It was declared obsolete by RFC 6150 in 2011:
;; https://tools.ietf.org/html/rfc6150
;;
;; You probably want to use `secure-hash' instead.
;;; Code: ;;; Code:
;;; ;;;
@ -33,7 +43,12 @@
(defun md4 (in n) (defun md4 (in n)
"Return the MD4 hash for a string IN of length N bytes. "Return the MD4 hash for a string IN of length N bytes.
The returned hash is 16 bytes long. N is required to handle The returned hash is 16 bytes long. N is required to handle
strings containing the character 0." strings containing the character 0.
The security of the MD4 hashing algorithm is very poor to
non-existent. It was declared obsolete by RFC 6150 in 2011.
You probably want to use `secure-hash' instead."
(let (m (let (m
(b (cons 0 (* n 8))) (b (cons 0 (* n 8)))
(i 0) (i 0)