On 04/24/2014 06:09 PM, Florian Schlichting wrote: > Package: wnpp > Owner: Florian Schlichting <fsfs@debian.org> > Severity: wishlist > X-Debbugs-CC: debian-devel@lists.debian.org,debian-perl@lists.debian.org > > * Package name : libdigest-perl-md5-perl > Version : 1.9 > Upstream Author : Christian Lackas <delta@lackas.net> > * URL : https://metacpan.org/release/Digest-Perl-MD5 > * License : Artistic or GPL-1+ > Programming Lang: Perl > Description : Perl Implementation of Rivest's MD5 algorithm > > Digest::Perl::MD5s has the same interface as the much faster Digest::MD5, but > unlike that, it is not an interface but a Perl implementation of MD5. Because > of this it is slow but it works without C-Code. You should use Digest::MD5 > instead of this module if it is available. This module is only useful for > > - computers where you cannot install Digest::MD5 (e.g. lack of a C-Compiler) > - encrypting only small amounts of data (less than one million bytes), I think the use of the term "encrypting" above should be changed to "hashing", since MD5 is not an encryption algorithm. > libdigest-perl-md5-perl is a dependency of libspreadsheet-parseexcel-perl, > which uses its internal state in its decryption routines and hence cannot be > switched to use Digest::MD5 instead. It will be maintained by pkg-perl. huh, this seems like a weird thing to do. What part of the internal state does libspreadsheet-parseexcel-perl need? is it just doing partial digests and then continuing, for example? if so, Digest::MD5 has $md5->clone() which should support this use case. If it really needs access to the internal state of the digest function for some reason, perhaps Digest::MD5 could be extended to provide that access? I know TMTOWTDI, but introducing this implementation to debian seems like a regression, when we know that all debian systems actually have Digest::MD5 already. --dkg
Attachment:
signature.asc
Description: OpenPGP digital signature