Skip to content

Do not use MD5 for hashing cookie and nonce values #3277

@carsten-wilhelm

Description

@carsten-wilhelm

Code of Conduct

Submission validity

  • This is not a personal support request, that should be posted on discussions community.
  • I checked current issues and this request isn't a duplicate of an existing issue, opened or closed.

Summary

In functions-auth.php, the MD5 algorithm is used in yourls_salt() function.

This function is used to hash the cookie content and the nonces used on the site.

Is it possible to configure a more modern hash algoriothm to improve security?

Motivation

Do no longer use MD5 hash

Describe the solution

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions