From 9b490567aa022e9796c9298901e0b849e47b356c Mon Sep 17 00:00:00 2001 From: zoff99 Date: Sun, 1 Oct 2023 12:10:27 +0200 Subject: [PATCH] md5 was never used in trifa for cryptographic purposes, but comment this function out so that github does not trigger a security alert --- .../com/zoffcc/applications/trifa/TrifaSetPatternActivity.java | 2 ++ 1 file changed, 2 insertions(+) diff --git a/android-refimpl-app/app/src/main/java/com/zoffcc/applications/trifa/TrifaSetPatternActivity.java b/android-refimpl-app/app/src/main/java/com/zoffcc/applications/trifa/TrifaSetPatternActivity.java index fdfe6707b..73eb9b8d0 100644 --- a/android-refimpl-app/app/src/main/java/com/zoffcc/applications/trifa/TrifaSetPatternActivity.java +++ b/android-refimpl-app/app/src/main/java/com/zoffcc/applications/trifa/TrifaSetPatternActivity.java @@ -165,6 +165,7 @@ public static byte[] sha256(byte[] input) } } + /* it's unused. and md5 should never be used for cryptographic purposes public static byte[] md5(byte[] input) { try @@ -176,4 +177,5 @@ public static byte[] md5(byte[] input) throw new RuntimeException(e); } } + */ }