IMO, this bug can be closed. There's been the decision by the OpenSSL Managment Board to reinstate RIPEMD160 (and only that) to the default providers in release 3.0.7.

The other algorithm, MD4 is unsafe and remains in the legacy provider.

References:
OMC decision: <https://www.openssl.org/blog/blog/2022/10/18/rmd160-and-the-legacy-provider/>
ChangeLog: <https://www.openssl.org/news/cl30.txt>

  -richy.

Reply via email to