search

opencontainers / go-digest

Common digest package used across the container ecosystem
https://www.opencontainers.org/
Other
184 stars 60 forks source link

do not register sha384 by default #97

Open thaJeztah opened 6 months ago

thaJeztah commented 6 months ago

related:

The SHA-384 algorithm is not documented in the OCI image-spec (1, 2), and is not encouraged to be used. Commit 084376bb543d4ce80b030a77a6f51f3b3fd861dc registered all algorithms by default, but also included SHA-384.

This patch disables SHA-384 by default, to discourage its use.

thaJeztah commented 5 months ago

Let me move this one to draft; I rebased https://github.com/opencontainers/go-digest/pull/98 to not depend on this PR.

thaJeztah commented 3 months ago

I rebased this, but kept it in draft for now, pending the discussion on this being a breaking change (and warranting a v2 of this module)