Message 162868 - Python tracker

> For password hashing, the attacker is unlikely to be able to provide
> the digest directly, but for signature checking it's far more likely
> to be the case.

Can you elaborate? What is the application, where is the digest
checking, and what is the threat?