hash_algos() docs should clarify which algos are cryptographic about doc-en HOT 3 OPEN

Maybe it is sufficient to clarify that hash_hmac_algos() lists these.

from doc-en.

This would only solve a tiny portion of the problem I was pointing out.

• First, it assumes that the user knows what a "cryptographic hash" is, and when they should use one over the opposite (a "non-cryptographic hash"?)
• Second, it still leaves them with a list of 44 algorithms to choose from, and no guidance whatsoever

What's really needed is:

• An explanation of different hashing use cases, and terms like "cryptographic hash"
• An explanation of when to use hash(), hash_hmac(), or password_hash()
• A list or table with the available algorithms, giving more than just their names
• Guidance on which algorithms to avoid (here's where you can talk about the weaknesses of MD5 and SHA1!)
• Some kind of recommendation of what algorithm users should pick for common use cases, if they're not constrained by compatibility

from doc-en.

hash_algos() docs should clarify which algos are cryptographic

I’m not sure it’s actually useful information; at least, it’s largely insufficient. For instance, md4 is “cryptographic“, but you shouldn’t use it for anything cryptography-related unless someone holds a gun to your head.

from doc-en.