You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ant.apache.org by bo...@apache.org on 2005/02/16 15:34:02 UTC
cvs commit: ant/docs/manual/CoreTasks checksum.html
bodewig 2005/02/16 06:34:02
Modified: docs/manual/CoreTasks checksum.html
Log:
choose your digest wisely
Revision Changes Path
1.14 +13 -0 ant/docs/manual/CoreTasks/checksum.html
Index: checksum.html
===================================================================
RCS file: /home/cvs/ant/docs/manual/CoreTasks/checksum.html,v
retrieving revision 1.13
retrieving revision 1.14
diff -u -r1.13 -r1.14
--- checksum.html 10 Sep 2004 14:19:26 -0000 1.13
+++ checksum.html 16 Feb 2005 14:34:02 -0000 1.14
@@ -13,6 +13,19 @@
Generates checksum for files. This task can also be used to
perform checksum verifications.
</p>
+
+<p>Note that many popular message digest functions - including MD5 and
+SHA-1 - have been broken recently. If you are going to use the task
+to create checksums used in an environment where security is
+important, please take some time to investigate the algorithms offered
+by your JCE provider. Note also that some JCE providers like the one
+by <a href="http://www.bouncycastle.org/">The Legion of the Bouncy
+Castle</a>, the <a href="http://www.gnu.org/software/gnu-crypto/">GNU
+project</a> or <a
+href="http://jce.iaik.tugraz.at/products/01_jce/index.php">the
+Technical University Graz</a> offer more digest algorithms than those
+built-in into your JDK.</p>
+
<h3>Parameters</h3>
<table border="1" cellpadding="2" cellspacing="0">
<tr>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ant.apache.org
For additional commands, e-mail: dev-help@ant.apache.org