atom feed28 messages in org.freebsd.freebsd-securityReport of collision-generation with MD5
FromSent OnAttachments
David WolfskillAug 18, 2004 10:24 am 
Peter C. LaiAug 18, 2004 11:02 am 
ClaudiuAug 18, 2004 11:08 am 
Mike TancsaAug 18, 2004 11:16 am 
Peter C. LaiAug 18, 2004 11:26 am 
Peter C. LaiAug 18, 2004 11:29 am 
mari...@ipad.com.brAug 18, 2004 12:26 pm 
Matthew SeamanAug 18, 2004 1:35 pm 
Chris DohertyAug 18, 2004 1:54 pm 
Brett GlassAug 18, 2004 4:46 pm 
Fernando GleiserAug 18, 2004 5:22 pm 
Borja MarcosAug 19, 2004 1:15 am 
Borja MarcosAug 19, 2004 2:45 am 
Jan GrantAug 19, 2004 3:28 am 
TigAug 19, 2004 7:48 am 
Poul-Henning KampAug 19, 2004 7:53 am 
Mohacsi JanosAug 19, 2004 8:40 am 
George F. CostanzoAug 19, 2004 4:12 pm 
gu...@device.dyndns.orgAug 25, 2004 12:56 pm 
Brooks DavisAug 25, 2004 1:21 pm 
Scott GerhardtAug 25, 2004 3:07 pm 
Mohacsi JanosAug 26, 2004 12:46 am 
Peter JeremyAug 26, 2004 1:09 am 
Oliver EikemeierAug 26, 2004 1:39 am 
Neo-VortexAug 26, 2004 1:54 am 
Jan GrantAug 26, 2004 6:41 am 
Chuck SwigerAug 26, 2004 1:19 pm 
Oliver EikemeierAug 26, 2004 3:08 pm 
Subject:Report of collision-generation with MD5
From:Oliver Eikemeier (eike@fillmore-labs.com)
Date:Aug 26, 2004 1:39:56 am
List:org.freebsd.freebsd-security

Mohacsi Janos wrote:

[...] I would also opt for having (by default) additional hash algorithms. I would prefer using method of NetBSD: using an external program called digest ( see security/digest port) to select the algorithms. Oliver Eikemeier is working a ports building infrastructure and I think it would be a good idea to this new infrastructure would support multiple hash algorithm. The most easiest way would be to define a knob like PREFERED_HASH that would list the algorithms that system would prefer, and REQUIRED_HASH that would be required to checked: - makesum should generate all the PREFERED_HASH - fetch should fail if any of the REQUIRED_HASH failed

devel/portmk supports generation of multiple hashes, although it will just verify the first of the sufficient ones. the problem is to test this stuff before 5.3. -Oliver