Gentoo Archives: gentoo-dev

From: "Robin H. Johnson" <robbat2@g.o>
To: gentoo-dev@l.g.o
Subject: [gentoo-dev] GLEP59 - Manifest2 hashes
Date: Sun, 31 Jan 2010 09:57:35
Message-Id: robbat2-20100131T094902-902405888Z@orbis-terrarum.net
In Reply to: [gentoo-dev] Tree-signing GLEPs update by "Robin H. Johnson"
1 Changes:
2 - This GLEP should be considered regardless of GLEP58 passes, as it has
3 independent value.
4 - Python 2.5 is widely deployed now (and a dep on newer versions of
5 Portage), so SHA512 is easily available.
6 - RIPEMD160 was broken, so drop it as well.
7 - Add WHIRLPOOL algorithm as it's not vulnerable to the same
8 decomposition analysis introduced by Wang et al.
9 - Add more detail to the migration plan.
10
11 --
12 Robin Hugh Johnson
13 Gentoo Linux: Developer, Trustee & Infrastructure Lead
14 E-Mail : robbat2@g.o
15 GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 944E 3488 4E85

Attachments

File name MIME type
glep-0059.txt text/plain

Replies

Subject Author
Re: [gentoo-dev] GLEP59 - Manifest2 hashes "Robin H. Johnson" <robbat2@g.o>
Re: [gentoo-dev] GLEP59 - Manifest2 hashes Doug Goldstein <cardoe@g.o>