{"action":"created","issue":{"url":"https://api.github.com/repos/pyca/cryptography/issues/2859","repository_url":"https://api.github.com/repos/pyca/cryptography","labels_url":"https://api.github.com/repos/pyca/cryptography/issues/2859/labels{/name}","comments_url":"https://api.github.com/repos/pyca/cryptography/issues/2859/comments","events_url":"https://api.github.com/repos/pyca/cryptography/issues/2859/events","html_url":"https://github.com/pyca/cryptography/issues/2859","id":143869495,"number":2859,"title":"More clearly document the perils of SHA-1","user":{"login":"alex","id":772,"avatar_url":"https://avatars.githubusercontent.com/u/772?v=3","gravatar_id":"","url":"https://api.github.com/users/alex","html_url":"https://github.com/alex","followers_url":"https://api.github.com/users/alex/followers","following_url":"https://api.github.com/users/alex/following{/other_user}","gists_url":"https://api.github.com/users/alex/gists{/gist_id}","starred_url":"https://api.github.com/users/alex/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alex/subscriptions","organizations_url":"https://api.github.com/users/alex/orgs","repos_url":"https://api.github.com/users/alex/repos","events_url":"https://api.github.com/users/alex/events{/privacy}","received_events_url":"https://api.github.com/users/alex/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/pyca/cryptography/labels/documentation","name":"documentation","color":"0052cc"},{"url":"https://api.github.com/repos/pyca/cryptography/labels/primitives","name":"primitives","color":"eb6420"},{"url":"https://api.github.com/repos/pyca/cryptography/labels/security-hardening","name":"security-hardening","color":"f7c6c7"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/pyca/cryptography/milestones/16","html_url":"https://github.com/pyca/cryptography/milestones/Fourteenth%20Release","labels_url":"https://api.github.com/repos/pyca/cryptography/milestones/16/labels","id":1652513,"number":16,"title":"Fourteenth Release","description":"","creator":{"login":"reaperhulk","id":161495,"avatar_url":"https://avatars.githubusercontent.com/u/161495?v=3","gravatar_id":"","url":"https://api.github.com/users/reaperhulk","html_url":"https://github.com/reaperhulk","followers_url":"https://api.github.com/users/reaperhulk/followers","following_url":"https://api.github.com/users/reaperhulk/following{/other_user}","gists_url":"https://api.github.com/users/reaperhulk/gists{/gist_id}","starred_url":"https://api.github.com/users/reaperhulk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/reaperhulk/subscriptions","organizations_url":"https://api.github.com/users/reaperhulk/orgs","repos_url":"https://api.github.com/users/reaperhulk/repos","events_url":"https://api.github.com/users/reaperhulk/events{/privacy}","received_events_url":"https://api.github.com/users/reaperhulk/received_events","type":"User","site_admin":false},"open_issues":7,"closed_issues":5,"state":"open","created_at":"2016-03-18T00:34:26Z","updated_at":"2016-03-28T01:38:34Z","due_on":null,"closed_at":null},"comments":1,"created_at":"2016-03-28T01:38:34Z","updated_at":"2016-03-28T20:52:46Z","closed_at":null,"body":"The docs currently tell you it's deprecated by NIST, but we should indicate in more detail the nature of its flaws: https://cryptography.io/en/latest/hazmat/primitives/cryptographic-hashes/#sha-1"},"comment":{"url":"https://api.github.com/repos/pyca/cryptography/issues/comments/202576910","html_url":"https://github.com/pyca/cryptography/issues/2859#issuecomment-202576910","issue_url":"https://api.github.com/repos/pyca/cryptography/issues/2859","id":202576910,"user":{"login":"collisdigital","id":14041600,"avatar_url":"https://avatars.githubusercontent.com/u/14041600?v=3","gravatar_id":"","url":"https://api.github.com/users/collisdigital","html_url":"https://github.com/collisdigital","followers_url":"https://api.github.com/users/collisdigital/followers","following_url":"https://api.github.com/users/collisdigital/following{/other_user}","gists_url":"https://api.github.com/users/collisdigital/gists{/gist_id}","starred_url":"https://api.github.com/users/collisdigital/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/collisdigital/subscriptions","organizations_url":"https://api.github.com/users/collisdigital/orgs","repos_url":"https://api.github.com/users/collisdigital/repos","events_url":"https://api.github.com/users/collisdigital/events{/privacy}","received_events_url":"https://api.github.com/users/collisdigital/received_events","type":"User","site_admin":false},"created_at":"2016-03-28T20:52:46Z","updated_at":"2016-03-28T20:52:46Z","body":"Worth pointing to NIST directly? E.g. http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r4.pdf from Jan-16 shows uses for SHA hashes, including SHA-1. Also generally http://csrc.nist.gov/publications/PubsFIPS.html#fips180-4 \r\n\r\nNot sure if these are the latest but it seems they usually put a cover page on docs once they have been archived pointing to newer versions. "}}