Using StringDigester for attribute hash function for consent ?

[Cantor, Scott]

On 11/20/14, 5:56 PM, "Tom Zeller" <tzeller at dragonacea.biz> wrote:



>I'm thinking I should use Brent's StringDigester, and I'm wondering
>about the salt. Basically, do I need to set the salt, and if so, what
>do I set it to ?

No, I added salting because it helped me use the function for a SWAMID 
audit use case without adding any more new code. In that case it was 
hashing to obfuscate the username, and there's a salt added to make users 
at different IdPs unique. 

But yes, I would use the digester function. Arguably you should just make 
it pluggable anyway so people could put in their own, which would allow 
for edge cases like people wanting to treat maybe different values of some 
attribute as the same for consent.

-- Scott