[gentoo-portage-dev] [GLEP59v2 4/5] Manifest2 hash backend provider: mhash

2011-10-01 Thread Robin H. Johnson
From: Robin H. Johnson robb...@gentoo.org Offer mhash as a provider for Manifest2 hash generation and validation. This is important as either of pycrypto or fchksum offer an accelerated Whirlpool implementation, and hashlib might not offer it. Additionally, the mhash implementation is accelerated

[gentoo-portage-dev] [GLEP59v2 2/5] Manifest2 hash: Whirlpool

2011-10-01 Thread Robin H. Johnson
From: Robin H. Johnson robb...@gentoo.org Provide public-domain implementation of the Whirlpool hash algorithm to be used as new Manifest2 hash. Signed-off-by: Robin H. Johnson robb...@gentoo.org --- pym/portage/checksum.py |8 ++-- 1 files changed, 6 insertions(+), 2 deletions(-) diff

[gentoo-portage-dev] [GLEP59v2 0/5] GLEP59: Manifest2 hash types

2011-10-01 Thread Robin H. Johnson
Respun now with the help of ferringb. Cleans up the implementation and catches a few bug and improvements: - mhash priority moved lower than pycrypto/hashlib because mhash holds GIL while the other implementations don't. - hashlib does offer whirlpool if it was built against openssl 1.0. 1/5:

[gentoo-portage-dev] [GLEP59v2 5/5] GLEP59: Change live Manifest2 hashes to SHA256, SHA512, WHIRLPOOL

2011-10-01 Thread Robin H. Johnson
From: Robin H. Johnson robb...@gentoo.org Change Manifest2 hashes to a more secure set as approved in GLEP59. SHA512 and WHIRLPOOL are added, SHA1 and RMD160 are dropped. SHA256 is now the lowest security hash, and must remain in Manifest files for at least 1 year, otherwise older Portage

[gentoo-portage-dev] [GLEP59v2 1/5] Refactor RMD160 hashlib code for less-hardcoding

2011-10-01 Thread Robin H. Johnson
From: Robin H. Johnson robb...@gentoo.org To be used shortly for WHIRLPOOL as well as RMD160. Signed-off-by: Robin H. Johnson robb...@gentoo.org --- pym/portage/checksum.py | 21 - 1 files changed, 12 insertions(+), 9 deletions(-) diff --git a/pym/portage/checksum.py

Re: [gentoo-portage-dev] [GLEP59v2 2/5] Manifest2 hash: Whirlpool

2011-10-01 Thread Brian Harring
On Sat, Oct 01, 2011 at 07:40:52AM +, Robin H. Johnson wrote: From: Robin H. Johnson robb...@gentoo.org Provide public-domain implementation of the Whirlpool hash algorithm to be used as new Manifest2 hash. Signed-off-by: Robin H. Johnson robb...@gentoo.org ---

Re: [gentoo-portage-dev] [PATCH 1/4] Manifest2 hash: Whirlpool

2011-10-01 Thread Mike Frysinger
On Thursday, September 29, 2011 21:27:39 Robin H. Johnson wrote: Provide public-domain implementation of the Whirlpool hash algorithm to be used as new Manifest2 hash. Signed-off-by: Robin H. Johnson robb...@gentoo.org --- pym/portage/checksum.py |4 +

Re: [gentoo-portage-dev] [PATCH 1/4] Manifest2 hash: Whirlpool

2011-10-01 Thread Alec Warner
On Sat, Oct 1, 2011 at 11:08 AM, Mike Frysinger vap...@gentoo.org wrote: On Thursday, September 29, 2011 21:27:39 Robin H. Johnson wrote: Provide public-domain implementation of the Whirlpool hash algorithm to be used as new Manifest2 hash. Signed-off-by: Robin H. Johnson robb...@gentoo.org

Re: [gentoo-portage-dev] [GLEP59v2 5/5] GLEP59: Change live Manifest2 hashes to SHA256, SHA512, WHIRLPOOL

2011-10-01 Thread Zac Medico
On 10/01/2011 12:40 AM, Robin H. Johnson wrote: diff --git a/pym/portage/const.py b/pym/portage/const.py index 8b5f4ac..a42ebe8 100644 --- a/pym/portage/const.py +++ b/pym/portage/const.py @@ -109,10 +109,12 @@ EAPI = 4 HASHING_BLOCKSIZE= 32768