Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

localkey.py: passwordToKeySHA calls hashPassphraseSHA #398

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

RKinsey
Copy link

@RKinsey RKinsey commented Apr 2, 2021

passwordToKeySHA has called hashPassphraseMD5 to generate its Ku hashPassphraseMD5 since 130bdaa. This is incorrect under RFC 3414 A.2.2, which uses SHA for both Ku and Kul.
Fortunately, none of the passwordToKey calls are used in the actual library, so this isn't a super urgent fix.

@lextm
Copy link

lextm commented Jan 20, 2023

Cherry picked to lextudio/pysnmp.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants