1 |
From: "Robin H. Johnson" <robbat2@g.o> |
2 |
|
3 |
Change Manifest2 hashes to a more secure set as approved in GLEP59. |
4 |
SHA512 and WHIRLPOOL are added, SHA1 and RMD160 are dropped. |
5 |
|
6 |
SHA256 is now the lowest security hash, and must remain in Manifest |
7 |
files for at least 1 year, otherwise older Portage installs will |
8 |
complain that they do not support any of the hashes in the Manifest |
9 |
files. |
10 |
|
11 |
Future events: |
12 |
After 2012/10/01: |
13 |
- Change MANIFEST2_REQUIRED_HASH to WHIRLPOOL. |
14 |
- Remove SHA256 from MANIFEST2_HASH_FUNCTIONS. |
15 |
After SHA-3 is approved: |
16 |
- Add new hashes to MANIFEST2_HASH_FUNCTIONS. |
17 |
|
18 |
Signed-off-by: Robin H. Johnson <robbat2@g.o> |
19 |
--- |
20 |
pym/portage/const.py | 6 ++++-- |
21 |
1 files changed, 4 insertions(+), 2 deletions(-) |
22 |
|
23 |
diff --git a/pym/portage/const.py b/pym/portage/const.py |
24 |
index 8b5f4ac..a42ebe8 100644 |
25 |
--- a/pym/portage/const.py |
26 |
+++ b/pym/portage/const.py |
27 |
@@ -109,10 +109,12 @@ EAPI = 4 |
28 |
|
29 |
HASHING_BLOCKSIZE = 32768 |
30 |
MANIFEST1_HASH_FUNCTIONS = ("MD5", "SHA256", "RMD160") |
31 |
-MANIFEST2_HASH_FUNCTIONS = ("SHA1", "SHA256", "RMD160") |
32 |
+MANIFEST2_HASH_FUNCTIONS = ("SHA256", "SHA512", "WHIRLPOOL") |
33 |
+# FUTURE: Add SHA-3 when available; remove SHA256 after 2012/10/01 |
34 |
|
35 |
MANIFEST1_REQUIRED_HASH = "MD5" |
36 |
-MANIFEST2_REQUIRED_HASH = "SHA1" |
37 |
+MANIFEST2_REQUIRED_HASH = "SHA256" |
38 |
+# FUTURE: Change to WHIRLPOOL after 2012/10/01 |
39 |
|
40 |
MANIFEST2_IDENTIFIERS = ("AUX", "MISC", "DIST", "EBUILD") |
41 |
# =========================================================================== |
42 |
-- |
43 |
1.7.7 |