From 4255046bd6989fadb94a7055efdaf6be6d6f9cbe Mon Sep 17 00:00:00 2001 From: David Barda Date: Mon, 15 Jul 2019 20:21:18 +0300 Subject: [PATCH] Update README: HMAC-SHA1 is not broken (#448) Remove irrelevant data from readme, as HMAC strength does not depend on the collisions of the hash function --- README.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/README.md b/README.md index 2913b47..c4453c8 100644 --- a/README.md +++ b/README.md @@ -268,8 +268,6 @@ From the OpenVPN wiki, about `--auth`: > > If an AEAD cipher mode (e.g. GCM) is chosen, the specified --auth algorithm is ignored for the data channel, and the authentication method of the AEAD cipher is used instead. Note that alg still specifies the digest used for tls-auth. -SHA1 [isn't safe anymore](https://en.wikipedia.org/wiki/SHA-1#Attacks). - The script provides the following choices: - `SHA256`