[jira] [Updated] (JENA-1812) Migrate blank node hash algorithm from MD5 to Murmur3_128

["Andy Seaborne (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/JENA-1812?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andy Seaborne updated JENA-1812:
--------------------------------
    Summary: Migrate blank node hash algorithm from MD5 to Murmur3_128  (was: Migrate blank node hash algorithm from MD5 to SHA-256)

> Migrate blank node hash algorithm from MD5 to Murmur3_128
> ---------------------------------------------------------
>
>                 Key: JENA-1812
>                 URL: https://issues.apache.org/jira/browse/JENA-1812
>             Project: Apache Jena
>          Issue Type: Improvement
>          Components: ARQ
>            Reporter: Nicolas Seydoux
>            Assignee: Andy Seaborne
>            Priority: Trivial
>             Fix For: Jena 3.15.0
>
>   Original Estimate: 5m
>          Time Spent: 1h 50m
>  Remaining Estimate: 0h
>
> MD5 is a deprecated hashing algorithm, and even though it is not used on sensitive data in the context of Jena, its usage is picked up by security softwares as a security flaw. This may reduce the incentive to use Jena in commercial products, and computing SHA-256 hashes is not prohibitively more expensive than MD5.
>  
> Therefore, I suggest to migrate from using MD5 hashes to SHA-256.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)