Open marikaswanberg opened 5 years ago
TinySHA1 as far as I could see is only being used to hash the hello string sent when initiating a websocket, I'm not sure if the hello string needs securing, but no sensitive data storage is using SHA1, in fact no part in the library even stores data.
On the readme, it says that you use the TinySHA1 library. I haven't looked through all of the source code, so I'm not sure exactly how you're using SHA1, but SHA1 has been found to be insecure against collision attacks. You may consider using SHA3 instead.