Martin v. Löwis <mar...@v.loewis.de> added the comment:

> For password hashing, the attacker is unlikely to be able to provide
> the digest directly, but for signature checking it's far more likely
> to be the case.

Can you elaborate? What is the application, where is the digest
checking, and what is the threat?

----------

_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue15061>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to