Follow-up Comment #19, bug #55093 (group grub):

Raphaƫl, that particular patchset
[https://lists.gnu.org/archive/html/grub-devel/2021-08/msg00027.html was sent
upstream several times now].
It has not been merged because it brings its own implementation of Argon2. The
maintainers would rather keep all hash functions coming from libgcrypt.

As MeganerdNL mentioned, Argon2 is already implemented in libgcrypt. The issue
though, is that GRUB is pinned to an old version of libgcrypt (1.5.3 ?).
Updating to a new version
[https://lists.gnu.org/archive/html/grub-devel/2023-11/msg00071.html seems to
be a large undertaking].

There is some hope, though, as a patch series to
[https://lists.gnu.org/archive/html/grub-devel/2024-05/msg00166.html update
libgcrypt to 1.10.3] was sent in May. Let's hope it gets the deserved
attention. 


    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/bugs/?55093>

_______________________________________________
Message sent via Savannah
https://savannah.gnu.org/

Attachment: signature.asc
Description: PGP signature

Reply via email to