python-ecdsa icon indicating copy to clipboard operation
python-ecdsa copied to clipboard

Published 20 hours ago • verified publisher icon tlsfuzzer

Change defaults to more secure

Open tomato42 opened this issue 5 years ago • 1 comments

The default curve is prime192v1 - weak, and deprecated/unusable in TLS 1.3 The default hash is sha1 - similarly, weak and deprecated/unusable in TLS 1.3

The library should default to P-256 (as the weakest/fastest curve generally considered safe) and SHA-256 (hash typically paired with it).

tomato42 avatar Sep 05 '18 14:09 tomato42

Since this would break API compatibility, postpone it till first release that will do that: 1.0

tomato42 avatar Nov 30 '19 14:11 tomato42