Weak Cryptographic Hash - Githubissues

bilibili / boxing

Android multi-media selector based on MVP mode.

Apache License 2.0

3.19k stars 386 forks source link

Weak Cryptographic Hash #165

Open QiAnXinCodeSafe opened 4 years ago

QiAnXinCodeSafe commented 4 years ago

https://github.com/bilibili/boxing/blob/bd1eeff8405a74c201ca489d6f753e306e84d195/boxing/src/main/java/com/bilibili/boxing/utils/ImageCompressor.java#L323

Weak cryptographic hashes cannot guarantee data integrity and should not be used in security-critical contexts.