[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: System integrity...

> I'm currently unsubscribed to -policy - I should be resubscribing soon,
> when my free time increases to that amount needed to follow policy.  So
> apologies if this has been covered before...  
> Doesn't an md5sums file need to have file lengths to work?  I
> understoood that there were known algorithms to produce a new file with
> a given md5sum, if you can vary the length of the file?

Just a brief note about the thread there: if md5sums are included in
packages, they will *only* be included for system integrity checks.
They serve *no* useful security purpose.  Given this, the MD5 sums
themselves should be adequate for the integrity tests.



  Julian Gilbey, Dept of Maths, QMW, Univ. of London. J.D.Gilbey@qmw.ac.uk
        Debian GNU/Linux Developer,  see http://www.debian.org/~jdg

Reply to: