Files
@ dd676aab3b4d
Branch filter:
Location: kallithea/docs/changelog.rst
dd676aab3b4d
200 B
text/prs.fallenstein.rst
auth: use HMAC-SHA1 to calculate password reset token
The use of standard cryptographic primitives is always preferable, and
in this case allows us not to worry about length extension attacks
and possibly any number of issues that I'm not presently aware of.
Also fix a potential Unicode encoding problem.
The use of standard cryptographic primitives is always preferable, and
in this case allows us not to worry about length extension attacks
and possibly any number of issues that I'm not presently aware of.
Also fix a potential Unicode encoding problem.