Re: new hashes (SHA512, SHA3) in apt metadata and .changes files?
On Fri, Aug 2, 2013 at 2:52 PM, Paul Wise <firstname.lastname@example.org> wrote:
> If so, here is the list of software that probably needs updating:
> derivatives census
Also, apt-get is forcing MD5 in --print-uris by default because not doing
it used to break all kinds of scripts. I think jigdo was one of them,
no idea if that is really the case and/or if this changed by now.
(not saying they shouldn't be fixed, just that the list is probably longer)
> Side note; is SHA512 accepted/checked by apt in Release files yet? If
> so it would be great if the spec at  could be updated for that.
Yes, APT is supporting SHA512 in in/output, but more as a by-product
of the SHA2 group as a whole than a specific feature. This, and a bit that
APT is just one implementation of this "spec" is the reason that it isn't
mentioned in the wiki.