From 2c30fcea82f51271c9e93e27d9442da41cd55c5e Mon Sep 17 00:00:00 2001 From: Palmer Cox Date: Sat, 5 Oct 2013 16:30:36 -0400 Subject: [PATCH] Clarify that the SipHash implementation has not be validated for cryptographic purposes. --- src/libstd/hash.rs | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/src/libstd/hash.rs b/src/libstd/hash.rs index ed7fc9eb1d95..6f6e847f569b 100644 --- a/src/libstd/hash.rs +++ b/src/libstd/hash.rs @@ -15,8 +15,13 @@ * * Consider this as a main "general-purpose" hash for all hashtables: it * runs at good speed (competitive with spooky and city) and permits - * cryptographically strong _keyed_ hashing. Key your hashtables from a - * CPRNG like rand::rng. + * strong _keyed_ hashing. Key your hashtables from a strong RNG, + * such as rand::rng. + * + * Although the SipHash algorithm is considered to be cryptographically + * strong, this implementation has not been reviewed for such purposes. + * As such, all cryptographic uses of this implementation are strongly + * discouraged. */ #[allow(missing_doc)];