id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
14445	Use HMAC and constant-time comparison functions where needed in Django	Luke Plant	nobody	"Various places in Django use MD5/SHA1 based methods as a kind of MAC (Message Authentication Code).  HMAC is a much better alternative.

In most cases, we need to maintain backwards compatibility with existing signed values, by falling back to the existing MD5/SHA1 method.  This means we will continue to have potential weaknesses, but by only generating HMACs from now on, we can phase out support for these old values over time, using the normal deprecation method.  This should give plenty of time for the old hashes to expire naturally anyway.

In addition, in all these places, and some others, the MACs are tested for validity using simple string equality, which potentially opens us up to timing-based attacks to discover the tokens.


"		closed	Uncategorized	1.2		fixed			Accepted	1	0	0	0	0	0