Update README: HMAC-SHA1 is not broken (#448)

Remove irrelevant data from readme, as HMAC strength does not depend on the collisions of the hash function
This commit is contained in:
David Barda 2019-07-15 20:21:18 +03:00 committed by Stanislas
parent dea1d6db2b
commit 4255046bd6

View File

@ -268,8 +268,6 @@ From the OpenVPN wiki, about `--auth`:
>
> If an AEAD cipher mode (e.g. GCM) is chosen, the specified --auth algorithm is ignored for the data channel, and the authentication method of the AEAD cipher is used instead. Note that alg still specifies the digest used for tls-auth.
SHA1 [isn't safe anymore](https://en.wikipedia.org/wiki/SHA-1#Attacks).
The script provides the following choices:
- `SHA256`