The following issue has been SUBMITTED. 
====================================================================== 
http://www.cmake.org/Bug/view.php?id=15060 
====================================================================== 
Reported By:                Nico Schlömer
Assigned To:                
====================================================================== 
Project:                    CMake
Issue ID:                   15060
Category:                   Documentation
Reproducibility:            have not tried
Severity:                   minor
Priority:                   normal
Status:                     new
====================================================================== 
Date Submitted:             2014-08-05 10:45 EDT
Last Modified:              2014-08-05 10:45 EDT
====================================================================== 
Summary:                    "This is not security software." too sloppy
Description: 
In the documentation of ExternalData
<http://www.cmake.org/cmake/help/v3.0/module/ExternalData.html>, the following
comment appears:

> Note that the hashes are used only for unique data identification and download

> verification. This is not security software.

This is too sloppy. It should probably read something like:

Note that, while there are a feasible collision attacks on MD5, there is no
known feasible second-preimage attack. MD5 is thus still considered appropriate
for download verification.
====================================================================== 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2014-08-05 10:45 Nico Schlömer  New Issue                                    
======================================================================

-- 

Powered by www.kitware.com

Please keep messages on-topic and check the CMake FAQ at: 
http://www.cmake.org/Wiki/CMake_FAQ

Kitware offers various services to support the CMake community. For more 
information on each offering, please visit:

CMake Support: http://cmake.org/cmake/help/support.html
CMake Consulting: http://cmake.org/cmake/help/consulting.html
CMake Training Courses: http://cmake.org/cmake/help/training.html

Visit other Kitware open-source projects at 
http://www.kitware.com/opensource/opensource.html

Follow this link to subscribe/unsubscribe:
http://public.kitware.com/mailman/listinfo/cmake-developers

Reply via email to