diff options
| author | Jonathan Protzenko <protz@microsoft.com> | 2023-05-08 03:50:04 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-05-08 03:50:04 (GMT) |
| commit | 15665d896bae9c3d8b60bd7210ac1b7dc533b093 (patch) | |
| tree | 828d0c447265d301089c91aec0803cf67a51e4f8 /Misc/NEWS.d/next | |
| parent | 01cc9c1ff79bf18fe34c05c6cd573e79ff9487c3 (diff) | |
| download | cpython-15665d896bae9c3d8b60bd7210ac1b7dc533b093.zip cpython-15665d896bae9c3d8b60bd7210ac1b7dc533b093.tar.gz cpython-15665d896bae9c3d8b60bd7210ac1b7dc533b093.tar.bz2 | |
gh-99108: Replace SHA3 implementation HACL* version (#103597)
Replaces our built-in SHA3 implementation with a verified one from the HACL* project.
This implementation is used when OpenSSL does not provide SHA3 or is not present.
3.11 shiped with a very slow tiny sha3 implementation to get off of the <=3.10 reference implementation that wound up having serious bugs. This brings us back to a reasonably performing built-in implementation consistent with what we've just replaced our other guaranteed available standard hash algorithms with: code from the HACL* project.
---------
Co-authored-by: Gregory P. Smith <greg@krypto.org>
Diffstat (limited to 'Misc/NEWS.d/next')
| -rw-r--r-- | Misc/NEWS.d/next/Security/2023-04-17-14-38-12.gh-issue-99108.720lG8.rst | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/Misc/NEWS.d/next/Security/2023-04-17-14-38-12.gh-issue-99108.720lG8.rst b/Misc/NEWS.d/next/Security/2023-04-17-14-38-12.gh-issue-99108.720lG8.rst new file mode 100644 index 0000000..f259acf --- /dev/null +++ b/Misc/NEWS.d/next/Security/2023-04-17-14-38-12.gh-issue-99108.720lG8.rst @@ -0,0 +1,2 @@ +Upgrade built-in :mod:`hashlib` SHA3 implementation to a verified implementation +from the ``HACL*`` project. Used when OpenSSL is not present or lacks SHA3. |