Use of a Broken or Risky Cryptographic Algorithm

[j10i2]

Hello, Dear Community!

I mentioned, that in Auth.go code we use a SHA-1 hash function for Authentification purposes.

Is it suitable to change this hash function to newer such as SHA-2 or SHA-3? SHA-1 is cryptographically broken and should not be used for secure applications.

Thank you!

[R-omk]

tarantool/tarantool#7770

[oleg-jukovec]

Hello, thank you for the issue! At the moment Tarantool does not support any other authentification method.

There are plans to add another authorization mechanism to Tarantool EE, but it won't be available in Tarantool Community Edition:
#243

If you want any other authorization method, then you could to open an issue in Tarantool:
https://github.com/tarantool/tarantool/