From 719907c863ba9a5b61a1a056366e23e1100516e8 Mon Sep 17 00:00:00 2001 From: Alex Gaynor Date: Wed, 12 Feb 2014 14:01:05 -0800 Subject: Be clear about HKDF's applicability for password storage --- docs/hazmat/primitives/key-derivation-functions.rst | 1 + 1 file changed, 1 insertion(+) (limited to 'docs/hazmat') diff --git a/docs/hazmat/primitives/key-derivation-functions.rst b/docs/hazmat/primitives/key-derivation-functions.rst index 1937c2ec..da47ccd3 100644 --- a/docs/hazmat/primitives/key-derivation-functions.rst +++ b/docs/hazmat/primitives/key-derivation-functions.rst @@ -128,6 +128,7 @@ Different KDFs are suitable for different tasks such as: `HKDF`_ (HMAC-based Extract-and-Expand Key Derivation Function) is suitable for deriving keys of a fixed size used for other cryptographic operations. + **HKDF should not be used for password storage.** .. doctest:: -- cgit v1.2.3 From c43bb7579b4cdb7b0c9306e5444ad94563f081e5 Mon Sep 17 00:00:00 2001 From: Alex Gaynor Date: Wed, 12 Feb 2014 16:42:11 -0800 Subject: Switch this to a warning block --- docs/hazmat/primitives/key-derivation-functions.rst | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'docs/hazmat') diff --git a/docs/hazmat/primitives/key-derivation-functions.rst b/docs/hazmat/primitives/key-derivation-functions.rst index da47ccd3..d8a0e241 100644 --- a/docs/hazmat/primitives/key-derivation-functions.rst +++ b/docs/hazmat/primitives/key-derivation-functions.rst @@ -128,7 +128,10 @@ Different KDFs are suitable for different tasks such as: `HKDF`_ (HMAC-based Extract-and-Expand Key Derivation Function) is suitable for deriving keys of a fixed size used for other cryptographic operations. - **HKDF should not be used for password storage.** + + .. warning:: + + HKDF should not be used for password storage. .. doctest:: -- cgit v1.2.3