[issue40482] _hashlib: register Python names as OpenSSL aliases

Christian Heimes report at bugs.python.org
Sun May 3 12:10:24 EDT 2020


Christian Heimes <lists at cheimes.de> added the comment:

Yes, it changes the global state of libcrypto.

I consider the risk to other application slim to non-existing. Two cases are problematic:

1) an application relies on the fact that EVP_get_digestbyname("sha3_256") fails.
2) an application also uses EVP_add_digest_alias() but registers a different digest algorithm.

Both cases seem highly unlikely to me.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue40482>
_______________________________________


More information about the Python-bugs-list mailing list