Gentoo Archives: gentoo-dev

From: "Robin H. Johnson" <robbat2@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] GLEP59 - Manifest2 hashes
Date: Tue, 02 Feb 2010 06:09:50
Message-Id: robbat2-20100202T054939-843430162Z@orbis-terrarum.net
In Reply to: Re: [gentoo-dev] GLEP59 - Manifest2 hashes by Doug Goldstein
1 On Mon, Feb 01, 2010 at 02:23:42AM -0600, Doug Goldstein wrote:
2 > On Sun, Jan 31, 2010 at 3:57 AM, Robin H. Johnson <robbat2@g.o> wrote:
3 > <snip>
4 > >
5 > > The SHA512 algorithm is available in Python 2.5, which has been a
6 > > dependency of Portage since approximately Python 2.1.6.13.
7 > <snip>
8 > I hate to nitpick, but I believe you meant Portage in that line.
9 Thanks :-) Fixed.
10
11 > However, great work on this GLEP, you've put forth some good solid
12 > research into it.
13 >
14 > I do hope that we don't intend on settling on SHA512 as the end all
15 > solution as well. We should retain a method for bumping the hashing
16 > algorithm used when the SHA-3 family becomes available.
17 The present Portage logic I believe requires SHA1 still be present (so
18 I'm not sure how good the second patch I gave would be), and I'd like
19 that to change to rather be the strongest supported & available
20 algorithm.
21
22 --
23 Robin Hugh Johnson
24 Gentoo Linux: Developer, Trustee & Infrastructure Lead
25 E-Mail : robbat2@g.o
26 GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 944E 3488 4E85