From 4f51433831a64605f14e14a8250fa6c166161af2 Mon Sep 17 00:00:00 2001 From: Paul Kehrer Date: Tue, 10 Nov 2015 23:41:28 -0600 Subject: update docs for MessageEncryptor#new to recommend a KDF [ci skip] --- activesupport/lib/active_support/message_encryptor.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'activesupport/lib/active_support') diff --git a/activesupport/lib/active_support/message_encryptor.rb b/activesupport/lib/active_support/message_encryptor.rb index c82a13511e..2dde01c844 100644 --- a/activesupport/lib/active_support/message_encryptor.rb +++ b/activesupport/lib/active_support/message_encryptor.rb @@ -34,8 +34,8 @@ module ActiveSupport # Initialize a new MessageEncryptor. +secret+ must be at least as long as # the cipher key size. For the default 'aes-256-cbc' cipher, this is 256 # bits. If you are using a user-entered secret, you can generate a suitable - # key with OpenSSL::Digest::SHA256.new(user_secret).digest or - # similar. + # key by using ActiveSupport::KeyGenerator or a similar key + # derivation function. # # Options: # * :cipher - Cipher to use. Can be any cipher returned by -- cgit v1.2.3