avro-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Doug Cutting (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AVRO-1404) Need support for SHA
Date Fri, 20 Dec 2013 00:29:07 GMT

    [ https://issues.apache.org/jira/browse/AVRO-1404?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13853508#comment-13853508

Doug Cutting commented on AVRO-1404:

I'm not sure why 16-byte hashes aren't good enough in this case.  The hashes are of the protocols.
 They do not provide security.  They serve to uniquely identify the protocol text required
to encode and decode requests.  128 bits should be large enough that collisions are extremely
unlikely, which is all that's required in this application.

Switching to another 128-bit hashing algorithm could be done compatibly, but switching to
a different hash size would not be compatible.

> Need support for SHA
> --------------------
>                 Key: AVRO-1404
>                 URL: https://issues.apache.org/jira/browse/AVRO-1404
>             Project: Avro
>          Issue Type: Improvement
>          Components: java
>    Affects Versions: 1.7.5, 1.7.6
>         Environment: RHEL 64-bit
>            Reporter: Marylou Orayani
>         Attachments: AVRO-1404.patch
> Currently, avro only supports MD5 for its hashes. We need support for SHA since MD5 is
not strong enough for our customer base.

This message was sent by Atlassian JIRA

View raw message