treeverse / treeverse/dvc

Support hashings other than MD5

Open
#3,069 61 comments 19 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

feature request p3-nice-to-have question
Dominant language
Python
Stars
15.9k
Forks
1.3k
PR merge metrics
No merged PRs in 30d

Description

The docs seem to imply that md5 is the only hash users can use. The vulnerabilities of md5 have made it not usable in many organizations which require a certain level of security.

Is the a way to use SHA1 or SHA256 or other hashes instead?

I saw some PRs (https://github.com/iterative/dvc/pull/2022 for instance), but they're closed w/o being merged. What's the progress on that front?

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reading the documentation that currently describes MD5 and the linked PR #2022, then review the 61-comment discussion for the current state of hash support. Done should include an agreed approach for SHA1, SHA256, or other hashes and corresponding documentation, with the relevant behavior verified.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
data, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.