Note: Due to technical difficulties, the Archives are currently not up to date.
GMANE provides an alternative service for most mailing lists. c.f. bug 424647
On Thu, Sep 21, 2006 at 09:49:18AM -0400, Mike Frysinger wrote:
> On Thursday 21 September 2006 09:34, Marius Mauch wrote:
> > Manifest2 records do not contain a MD5 checksum. The only guaranteed
> > checksum type there is SHA1. So once manifest1 is phased out the tree
> > will not contain MD5 checksums anymore.
>
> by "guaranteed" do you mean "guaranteed to be in the records" ? SHA1 has
> proven to be "insecure" like MD5
Guranteed to be in the chksum data; iow, when manifest2 is switched
over to fully all manifest1/digest data becomes effectively invisible
to portage and is filtered out on commits.
So... what's guranteed in manifest2 now is just sha1. In reality, it
holds size/sha1/sha256/rmd160 per file entry.
~harring
|
|
