I just want to add that an even better option, long-term, would probably
be to push back to upstream the idea that the installer should be
modified to present the user installing the system with the choice of
hash to be used.  However, this does not change the fact that the
default hash should be changed to something significantly stronger than
SHA-1, probably something from the SHA-2 family such as SHA-256 or
SHA-512, as mentioned in this ticket.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1275380

Title:
  Cryptsetup still using SHA-1 as default hash for Debian Installer

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cryptsetup/+bug/1275380/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to