summaryrefslogtreecommitdiff
path: root/lib
diff options
context:
space:
mode:
authorKazuki Yamaguchi <k@rhe.jp>2023-07-12 22:27:54 +0900
committerKazuki Yamaguchi <k@rhe.jp>2023-07-12 23:40:58 +0900
commitf4bf80623fe72295cfa4a64de38a062d81359643 (patch)
tree9d6301ac5d4f7747947ff2682346fbccb8ccaac8 /lib
parent4b6d667c63481abd17ce5446bceb053c0881739f (diff)
[ruby/openssl] [DOC] remove top-level example for
OpenSSL::Cipher#pkcs5_keyivgen (https://github.com/ruby/openssl/pull/647) OpenSSL::Cipher#pkcs5_keyivgen should only be used when it is absolutely necessary for compatibility with ancient applications. Having an example can be misleading. We already have another example for OpenSSL::Cipher in which PBKDF2 is used to derive a key. As described in the rdoc of OpenSSL::Cipher#pkcs5_keyivgen, it is compatible with PKCS#5 PBES1 (PKCS#5 v1.5) only when used in combination of a hash function MD2, MD5, or SHA-1, and a cipher DES-CBC or RC2-CBC. This example uses MD5 as the hash function and combines it with AES. This is considered insecure and also using a non-standard technique to derive longer keys. https://github.com/ruby/openssl/commit/e379cc0cca
Diffstat (limited to 'lib')
0 files changed, 0 insertions, 0 deletions