Re: Report of collision-generation with MD5


Mohacsi Janos wrote:
> [...]
> I would also opt for having (by default) additional hash algorithms. I 
> would prefer using method of NetBSD: using an external program called 
> digest ( see security/digest port) to select the algorithms. Oliver 
> Eikemeier is working a ports building infrastructure and I think it 
> would be a good idea to this new infrastructure would support multiple 
> hash algorithm. The most easiest way would be to define a knob like 
> PREFERED_HASH that would list the algorithms that system would prefer, 
> and REQUIRED_HASH that would be required to checked:
> - makesum should generate all the PREFERED_HASH
> - fetch should fail if any of the REQUIRED_HASH failed

devel/portmk supports generation of multiple hashes, although it will 
just verify the first of the sufficient ones. the problem is to test 
this stuff before 5.3.
-Oliver

_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"