letsencrypt / pebble / 35784676080

9%

master: 8%

push

github

Use RFC 7093 SHA-512 truncated SKIs (#551)

Always generate Subject Key Identifiers according to RFC 7093 Section 2
method 3: the leftmost 160 bits of the SHA-512 hash of the
`subjectPublicKey` BIT STRING.

This removes Pebble's use of SHA-1, so it can run with
`GOFIPS140=v1.0.0` / `GODEBUG=fips140=only`. It also stays distinct from
Boulder, which uses RFC 7093 Section 2 method 1 (truncated SHA-256).

2 of 2 new or added lines in 1 file covered. (100.0%)

431 of 4663 relevant lines covered (9.24%)

1.71 hits per line