New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

不安全的哈希算法：SHA-1 #368

Open

QiAnXinCodeSafe opened this issue Sep 9, 2019 · 0 comments

QiAnXinCodeSafe commented Sep 9, 2019

atlas/atlas-gradle-plugin/dexpatch/src/main/java/com/taobao/android/dex/Dex.java

Line 290 in 9c84e88

digest = MessageDigest.getInstance("SHA-1");

弱加密哈希不能保证数据完整性，不应在安全关键的上下文中使用。在安全性要求较高的系统中，应采用散列值>=224比特的SHA系列算法（如SHA-224、SHA-256、SHA-384和SHA-512）来保证敏感数据的完整性。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment