Gentoo Archives: gentoo-dev

From: Ciaran McCreesh <ciaran.mccreesh@×××××××××××××.uk>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] SHA256 digest issues
Date: Thu, 27 Apr 2006 11:24:29
Message-Id: 20060427122135.665ef0fb@snowdrop.home
In Reply to: [gentoo-dev] SHA256 digest issues by Marien Zwart
1 On Thu, 27 Apr 2006 12:50:02 +0200 Marien Zwart <marienz@g.o>
2 wrote:
3 | We (portage project) are fixing known broken Manifests/digests. If you
4 | come across any broken SHA256 digests feel free to fix them though:
5 | the package is basically unusable with ~arch portage until it is
6 | fixed, and fixing it twice does not really hurt :)
7
8 If you're looking to avoid downloading too much... All source tarballs
9 whose file size (mod 64) is 55 are the ones affected, which would
10 suggest that somewhere very roughly in the region of one package in
11 sixty four with SHA256 digests is h0rked.
12
13 There's a good testsuite which would have caught this at [1].
14
15 [1]: http://csrc.nist.gov/cryptval/shs.htm
16
17 --
18 Ciaran McCreesh
19 Mail : ciaran dot mccreesh at blueyonder.co.uk
20
21
22 --
23 gentoo-dev@g.o mailing list