@@ -516,10 +516,10 @@ supported groups are: `'modp1'`, `'modp2'`, `'modp5'` (defined in
516
516
` 'modp15' ` , ` 'modp16' ` , ` 'modp17' ` , ` 'modp18' ` (defined in
517
517
[ RFC 3526] [ ] ). The returned object mimics the interface of objects
518
518
created by [ crypto.createDiffieHellman()] [ ] above, but will not allow
519
- to change the keys (with [ diffieHellman.setPublicKey()] [ ] for
520
- example). The advantage of using this routine is that the parties do
521
- not have to generate nor exchange group modulus beforehand, saving
522
- both processor and communication time.
519
+ changing the keys (with [ diffieHellman.setPublicKey()] [ ] for example).
520
+ The advantage of using this routine is that the parties do not have to
521
+ generate nor exchange group modulus beforehand, saving both processor
522
+ and communication time.
523
523
524
524
Example (obtaining a shared secret):
525
525
@@ -771,14 +771,13 @@ temporary measure.
771
771
## Caveats
772
772
773
773
The crypto module still supports some algorithms which are already
774
- compromised. And the API also allows to use ciphers and hashes with a
775
- small key size that are considered to be too weak for safe use.
774
+ compromised. And the API also allows the use of ciphers and hashes
775
+ with a small key size that are considered to be too weak for safe use.
776
776
777
777
Users should take full responsibility for selecting the crypto
778
778
algorithm and key size according to their security requirements.
779
779
780
- The following descriptions only show some recommendations to use
781
- crypto module. See [ NIST SP 800-131A] for details.
780
+ Based on the recommendations of [ NIST SP 800-131A] :
782
781
783
782
- MD5 and SHA-1 are no longer acceptable where collision resistance is
784
783
required such as digital signatures.
@@ -788,6 +787,8 @@ crypto module. See [NIST SP 800-131A] for details.
788
787
- The DH groups of ` modp1 ` , ` modp2 ` and ` modp5 ` have a key size
789
788
smaller than 2048 bits and are not recommended.
790
789
790
+ See the reference for other recommendations and details.
791
+
791
792
[ createCipher() ] : #crypto_crypto_createcipher_algorithm_password
792
793
[ createCipheriv() ] : #crypto_crypto_createcipheriv_algorithm_key_iv
793
794
[ getCurves() ] : #crypto_crypto_getcurves
0 commit comments