latchset / custodia

An API to manage secrets storage and retrieval
GNU General Public License v3.0
85 stars 27 forks source link

Move default RSA encryption to RSA- #250

Open simo5 opened 3 years ago

simo5 commented 3 years ago

https://github.com/latchset/custodia/blob/090115aa547e131cdaabb2030c1bf1670d496430/src/custodia/message/kem.py#L191

The original commit that changed this from RSA1_5 mentioned not going immediately to RSA-OAEP-256 for compatibility reasons. RSA-OAEP uses SHA-1 and we should move to SHA-256 to avoid questions as SHA-1 is being deprecated left and right.