IntenseWebs/opentofu
3
0
Fork 0
mirror of https://github.com/opentofu/opentofu.git synced 2025-02-25 18:45:20 -06:00
Code Issues Packages Projects Releases Wiki Activity

doc: Add and Improve Security Notices for filemd5, md5, and filesha1 functions (#1443)

Browse Source 
Signed-off-by: Zhiwei Liang <zhi.wei.liang@outlook.com>
This commit is contained in:
Zhiwei 2024-03-28 11:45:13 -04:00 committed by GitHub
parent dcec46ef0b
commit 6dcc39e107
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
website/docs/language/functions/filemd5.mdx
View File

@ -13,3 +13,8 @@ that hashes the contents of a given file rather than a literal string.
This is similar to `md5(file(filename))`, but
because [`file`](/docs/language/functions/file) accepts only UTF-8 text it cannot be used to
create hashes for binary files.
Collision attacks have been successfully performed against this hashing
function. Before using this function for anything security-sensitive, refer to
[RFC 6151](https://tools.ietf.org/html/rfc6151) for updated security
considerations applying to the MD5 algorithm.

4
website/docs/language/functions/filesha1.mdx
View File

@ -13,3 +13,7 @@ that hashes the contents of a given file rather than a literal string.
This is similar to `sha1(file(filename))`, but
because [`file`](/docs/language/functions/file) accepts only UTF-8 text it cannot be used to
create hashes for binary files.
Collision attacks have been successfully performed against this hashing
function. Before using this function for anything security-sensitive, review
relevant literature to understand the security implications.

3
website/docs/language/functions/md5.mdx
View File

@ -14,7 +14,8 @@ The given string is first encoded as UTF-8 and then the MD5 algorithm is applied
as defined in [RFC 1321](https://tools.ietf.org/html/rfc1321). The raw hash is
then encoded to lowercase hexadecimal digits before returning.
Before using this function for anything security-sensitive, refer to
Collision attacks have been successfully performed against this hashing
function. Before using this function for anything security-sensitive, refer to
[RFC 6151](https://tools.ietf.org/html/rfc6151) for updated security
considerations applying to the MD5 algorithm.