Nicolas Seydoux created JENA-1812:
-------------------------------------

             Summary: Migrate blank node hash algorithm from MD5 to SHA-256
                 Key: JENA-1812
                 URL: https://issues.apache.org/jira/browse/JENA-1812
             Project: Apache Jena
          Issue Type: Improvement
          Components: ARQ
            Reporter: Nicolas Seydoux
             Fix For: Jena 3.14.0


MD5 is a deprecated hashing algorithm, and even though it is not used on 
sensitive data in the context of Jena, its usage is picked up by security 
softwares as a security flaw. This may reduce the incentive to use Jena in 
commercial products, and computing SHA-256 hashes is not prohibitively more 
expensive than MD5.

 

Therefore, I suggest to migrate from using MD5 hashes to SHA-256.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to