From 47f9a6b3a3c706b863849deb6122ecf49ef5f5e3 Mon Sep 17 00:00:00 2001 From: Christian Stadelmann Date: Thu, 23 Apr 2015 11:08:29 +0200 Subject: [PATCH] Add another security warning for using the SHA-2 implementation --- src/librustc_back/sha2.rs | 1 + 1 file changed, 1 insertion(+) diff --git a/src/librustc_back/sha2.rs b/src/librustc_back/sha2.rs index 9ed827da8b2e4..efbd4c3ef5ec2 100644 --- a/src/librustc_back/sha2.rs +++ b/src/librustc_back/sha2.rs @@ -482,6 +482,7 @@ pub struct Sha256 { impl Sha256 { /// Construct a new instance of a SHA-256 digest. + /// Do not – under any circumstances – use this where timing attacks might be possible! pub fn new() -> Sha256 { Sha256 { engine: Engine256::new(&H256)