Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-93838

Consider SHA-1 algorithm deprecated

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Open
    • Priority: P4: Low
    • Resolution: Unresolved
    • Affects Version/s: 5.15.4, 6.1.0
    • Fix Version/s: None
    • Component/s: Core: Other
    • Labels:
      None
    • Platform/s:
      All

      Description

      The Qt API (QCryptographicHash) still provides SHA-1 algorithm which was considered deprecated and not secure enough.

      It has been officially deprecated by NIST (National Institute of Standards and Technology) in 2011 and adviced to remove it from products ASAP and move to SHA-2 or SHA-3 instead. Also all browsers no longer accept SHA-1 SSL certificates and Microsoft discontinued SHA-1 code signing in 2020.

      Therefore, this algorithm should be also considered as deprecated in Qt and users should be adviced to use something else instead.

       

       

        Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

            Assignee:
            thiago Thiago Macieira
            Reporter:
            jgrulich Jan Grulich
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Dates

              Created:
              Updated:

                Gerrit Reviews

                There are no open Gerrit changes