bug#25999: SHA1SUM: please switch to sha1dc to warn of attempted hash collision attacks

2017-03-06 Thread Pádraig Brady
On 06/03/17 07:16, Henrique de Moraes Holschuh wrote: > This is a feature request, in light of the "shattered" attack against > SHA-1[1] published by Google. > > A drop-in replacement for sha1 exists, based on the concept of > counter-cryptanalysis[2]. This drop-in replacement can detect when the

bug#26002: [patch] md5sum --digest-only

2017-03-06 Thread Pádraig Brady
On 05/03/17 23:55, Michael Vogt wrote: > Hi, > > this is a bit of a RFC (anlong with a patch). I would like to have an > option in md5sum (and friends) that displays only the digest without > the filename. The use-case is mostly package maintainer scripts. They > often need the md5sum to e.g. chec

bug#26002: [patch] md5sum --digest-only

2017-03-06 Thread Michael Vogt
Hi, this is a bit of a RFC (anlong with a patch). I would like to have an option in md5sum (and friends) that displays only the digest without the filename. The use-case is mostly package maintainer scripts. They often need the md5sum to e.g. check if a conffile has changed and use patterns like:

bug#25999: SHA1SUM: please switch to sha1dc to warn of attempted hash collision attacks

2017-03-06 Thread Henrique de Moraes Holschuh
This is a feature request, in light of the "shattered" attack against SHA-1[1] published by Google. A drop-in replacement for sha1 exists, based on the concept of counter-cryptanalysis[2]. This drop-in replacement can detect when the SHA-1 hash hits the weakened internal states used by the shatte