[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: How APT signs packages



On Fri, 2012-10-19 at 12:27 +0200, Florian Ernst wrote:
> There aren't any. That is, there aren't any such plans *anymore*, as
> SHA256 is already in use and that page is partially misleading, cf.
I recently started a discussion on debian-devel about moving to even stronger hashes like SHA512 or Keccack.


> ----- 8< -----
> What does it mean for md5sum to be broken? Since it's a checksum, I
> thought the only way it can be broken is that it fail to compute the
> proper checksum. I have a feeling some other meaning is intended.
> --RossBoylan
That's complete nonsense.... md5sum is at first place a hash algorithm
(and not a checksum) for which collision resistance is utterly
important.


Cheers,
Chris.

Attachment: smime.p7s
Description: S/MIME cryptographic signature


Reply to: