Closed Bug 1346311 Opened 9 years ago Closed 6 years ago

Remove MD2 support from nsICryptoHash

Categories

(Core :: Security: PSM, enhancement, P3)

Product:
Core
Component:
Security: PSM
Type:
enhancement

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1526302

People

(Reporter: Cykesiopka, Unassigned)

References

(
URL
)

Details

(Whiteboard: [psm-backlog])

MD2 is broken, and AFAICT there's really no good reason why nsICryptoHash needs to support it in this day and age: 1. Nothing major seems to require it 2. It's been retired by https://tools.ietf.org/html/rfc6149 3. Cursory investigation of uses in addons suggests most if not all of the uses are "it's there, might as well use it" There are no users of nsICryptoHash::MD2 in m-c, AFAICT. There is one in c-c: https://hg.mozilla.org/comm-central/file/d03f6d1f69374c85d4939d0c7cb92021614600f4/mailnews/mime/src/mimemcms.cpp#l171 I suspect we can just drop support for MD2 in this code.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.