Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-dev
Navigation:
Lists: gentoo-dev: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-dev@g.o
From: Brian Harring <ferringb@...>
Subject: Re: Notification about MD5 support
Date: Thu, 21 Sep 2006 07:00:36 -0700
On Thu, Sep 21, 2006 at 09:49:18AM -0400, Mike Frysinger wrote:
> On Thursday 21 September 2006 09:34, Marius Mauch wrote:
> > Manifest2 records do not contain a MD5 checksum. The only guaranteed
> > checksum type there is SHA1. So once manifest1 is phased out the tree
> > will not contain MD5 checksums anymore.
> 
> by "guaranteed" do you mean "guaranteed to be in the records" ?  SHA1 has 
> proven to be "insecure" like MD5

Guranteed to be in the chksum data; iow, when manifest2 is switched 
over to fully all manifest1/digest data becomes effectively invisible 
to portage and is filtered out on commits.

So... what's guranteed in manifest2 now is just sha1.  In reality, it 
holds size/sha1/sha256/rmd160 per file entry.
~harring
Attachment:
pgpp06Zok5dBY.pgp (PGP signature)
Replies:
Re: Notification about MD5 support
-- Mike Frysinger
References:
Notification about MD5 support
-- Marius Mauch
Re: Notification about MD5 support
-- Mike Frysinger
Navigation:
Lists: gentoo-dev: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Re: Notification about MD5 support
Next by thread:
Re: Notification about MD5 support
Previous by date:
Re: RFC about another *DEPEND variable
Next by date:
Re: RFC about another *DEPEND variable


Updated Jun 17, 2009

Summary: Archive of the gentoo-dev mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.