aboutsummaryrefslogtreecommitdiffstats
path: root/docs/hazmat/primitives/symmetric-encryption.rst
diff options
context:
space:
mode:
authorPaul Kehrer <paul.l.kehrer@gmail.com>2017-05-27 15:11:24 -0500
committerAlex Gaynor <alex.gaynor@gmail.com>2017-05-27 16:11:24 -0400
commitafa84f10a2077b2365c30a133ae943e96c1c1ee8 (patch)
treeb6fc79dbd407ee8a22718a09115b1e29303a2260 /docs/hazmat/primitives/symmetric-encryption.rst
parent35acb37330e8d8e079b19d9fde2e16003f0defab (diff)
downloadcryptography-afa84f10a2077b2365c30a133ae943e96c1c1ee8.tar.gz
cryptography-afa84f10a2077b2365c30a133ae943e96c1c1ee8.tar.bz2
cryptography-afa84f10a2077b2365c30a133ae943e96c1c1ee8.zip
strongly encourage the use of fernet, document its limitation (#3623)
Diffstat (limited to 'docs/hazmat/primitives/symmetric-encryption.rst')
-rw-r--r--docs/hazmat/primitives/symmetric-encryption.rst3
1 files changed, 3 insertions, 0 deletions
diff --git a/docs/hazmat/primitives/symmetric-encryption.rst b/docs/hazmat/primitives/symmetric-encryption.rst
index e99c2c0a..8b047b8c 100644
--- a/docs/hazmat/primitives/symmetric-encryption.rst
+++ b/docs/hazmat/primitives/symmetric-encryption.rst
@@ -16,6 +16,9 @@ decrypt them.
For this reason it is **strongly** recommended to combine encryption with a
message authentication code, such as :doc:`HMAC </hazmat/primitives/mac/hmac>`,
in an "encrypt-then-MAC" formulation as `described by Colin Percival`_.
+``cryptography`` includes a recipe named :doc:`/fernet` that does this for you.
+**To minimize the risk of security issues you should evaluate Fernet to see if
+it fits your needs before implementing anything using this module.**
.. class:: Cipher(algorithm, mode, backend)