From 97e550ce79108837403b06b4aba3f8930d33c69b Mon Sep 17 00:00:00 2001
From: Stefan Bodewig <bodewig@apache.org>
Date: Wed, 16 Feb 2005 14:34:02 +0000
Subject: [PATCH] choose your digest wisely

git-svn-id: https://svn.apache.org/repos/asf/ant/core/trunk@277674 13f79535-47bb-0310-9956-ffa450edef68
---
 docs/manual/CoreTasks/checksum.html | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/docs/manual/CoreTasks/checksum.html b/docs/manual/CoreTasks/checksum.html
index 90e294108..172cbc8da 100644
--- a/docs/manual/CoreTasks/checksum.html
+++ b/docs/manual/CoreTasks/checksum.html
@@ -13,6 +13,19 @@
 Generates checksum for files.  This task can also be used to
 perform checksum verifications.
 </p>
+
+<p>Note that many popular message digest functions - including MD5 and
+SHA-1 - have been broken recently.  If you are going to use the task
+to create checksums used in an environment where security is
+important, please take some time to investigate the algorithms offered
+by your JCE provider.  Note also that some JCE providers like the one
+by <a href="http://www.bouncycastle.org/">The Legion of the Bouncy
+Castle</a>, the <a href="http://www.gnu.org/software/gnu-crypto/">GNU
+project</a> or <a
+href="http://jce.iaik.tugraz.at/products/01_jce/index.php">the
+Technical University Graz</a> offer more digest algorithms than those
+built-in into your JDK.</p>
+
 <h3>Parameters</h3>
 <table border="1" cellpadding="2" cellspacing="0">
   <tr>