aboutsummaryrefslogtreecommitdiffstats
path: root/docs/hazmat
diff options
context:
space:
mode:
authorAlex Gaynor <alex.gaynor@gmail.com>2016-08-28 23:15:37 -0400
committerPaul Kehrer <paul.l.kehrer@gmail.com>2016-08-29 11:15:37 +0800
commita2bf0ea1706f501b44b538b9a14270657a1b92de (patch)
tree953e0dd59f5d5a0b6769e7a885fab51d0cfaa659 /docs/hazmat
parent306ce512a28cdba29adf98125d894b90bb6bd78b (diff)
downloadcryptography-a2bf0ea1706f501b44b538b9a14270657a1b92de.tar.gz
cryptography-a2bf0ea1706f501b44b538b9a14270657a1b92de.tar.bz2
cryptography-a2bf0ea1706f501b44b538b9a14270657a1b92de.zip
Mention that blake2 is not vulnerable to length-extension attacks (#3118)
* Mention that blake2 is not vulnerable to length-extension attacks * SHA is sort of like a word, in the sense that I want the spellcheck to shut up about it * rephrase
Diffstat (limited to 'docs/hazmat')
-rw-r--r--docs/hazmat/primitives/cryptographic-hashes.rst5
1 files changed, 4 insertions, 1 deletions
diff --git a/docs/hazmat/primitives/cryptographic-hashes.rst b/docs/hazmat/primitives/cryptographic-hashes.rst
index b0e9c16a..fd5f35d9 100644
--- a/docs/hazmat/primitives/cryptographic-hashes.rst
+++ b/docs/hazmat/primitives/cryptographic-hashes.rst
@@ -120,7 +120,9 @@ SHA-2 family
BLAKE2
~~~~~~
-`BLAKE2`_ is a cryptographic hash function specified in :rfc:`7693`.
+`BLAKE2`_ is a cryptographic hash function specified in :rfc:`7693`. BLAKE2's
+design makes it immune to `length-extension attacks`_, an advantage over the
+SHA-family of hashes.
.. note::
@@ -224,3 +226,4 @@ Interfaces
.. _`Lifetimes of cryptographic hash functions`: http://valerieaurora.org/hash.html
.. _`BLAKE2`: https://blake2.net
+.. _`length-extension attacks`: https://en.wikipedia.org/wiki/Length_extension_attack