Skip to content

gh-160333: deprecate BLAKE-2 salt and personalization without a key - #160375

Closed
picnixz wants to merge 2 commits into
python:mainfrom
picnixz:meta/crypto/c/deprecate/blake2-unkeyed-params-160333
Closed

picnixz wants to merge 2 commits into
python:mainfrom
picnixz:meta/crypto/c/deprecate/blake2-unkeyed-params-160333

Conversation

@picnixz

@picnixz picnixz commented Oct 22, 2026 •

Copy link
Copy Markdown
Member

Passing salt or person to hashlib.blake2b or hashlib.blake2s without a non-empty key now emits a DeprecationWarning, even if they are empty. Keyed hashing still accepts these parameters. Removal is scheduled for Python 3.21.

… key

Passing *salt* or *person* to `hashlib.blake2b` or `hashlib.blake2s`
without a non-empty *key* now emits a `DeprecationWarning`, even if they
are empty. Keyed hashing still accepts these parameters. Removal is
scheduled for Python 3.21.
@read-the-docs-community

read-the-docs-community Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

@picnixz

picnixz commented Oct 22, 2026

Copy link
Copy Markdown
Member Author

!buildbot FIPS

@bedevere-bot

Copy link
Copy Markdown

🤖 New build scheduled with the buildbot fleet by @picnixz for commit f19452a 🤖

Results will be shown at:

https://buildbot.python.org/all/#/grid?branch=refs%2Fpull%2F160375%2Fmerge

The command will test the builders whose names match following regular expression: FIPS

The builders matched are:

  • AMD64 CentOS10 FIPS No Builtin Hashes PR
  • AMD64 CentOS9 FIPS Only Blake2 Builtin Hash PR
  • AMD64 CentOS10 FIPS Only Blake2 Builtin Hash PR
  • AMD64 CentOS9 FIPS No Builtin Hashes PR

@picnixz

picnixz commented Oct 23, 2026

Copy link
Copy Markdown
Member Author

Withdrawn since we only see the cost reduced in 5y and since HACL* anyway provides the full interface at almost no cost. I will try to see how I can simplify the module in general.

@picnixz picnixz closed this Oct 23, 2026
@picnixz
picnixz deleted the meta/crypto/c/deprecate/blake2-unkeyed-params-160333 branch October 23, 2026 18:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

awaiting core review type-feature A feature request or enhancement

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants