<section2topic='Hash Function Input Data Separators'anchor='security-separators'>
<p>The codepoints used for separating the different parts in the <linkurl='#algorithm-input'>Hash Function Input Algortihm</link> (&sepl1; through &sepl4;) are not allowed in well-formed XML character data. As entities are, per &xmppcore;, required to close a stream if non-well-formed XML data is received, these codepoints cannot occur in the input to the algorithm and their use as separators is safe.</p>
<p>The codepoints used for separating the different parts in the <linkurl='#algorithm-input'>Hash Function Input Algortihm</link> (&sepl1; through &sepl4;) are not allowed in well-formed <linkurl='https://www.w3.org/TR/2008/REC-xml-20081126/#charsets'>XML 1.0 character data</link><note>Note that the "ASCII Seperators" codepoints would be valid, although discouraged, <linkurl='https://www.w3.org/TR/2006/REC-xml11-20060816/#charsets'>characters of XML 1.1</link>, but XMPP mandates XML 1.0.</note>. As entities are, per &xmppcore;, required to close a stream if non-well-formed XML 1.0 data is received, these codepoints cannot occur in the input to the algorithm and their use as separators is safe.</p>