Re: announce-gen: replace SHA1 checksums with SHA3-256.

[Pádraig Brady]

On 23/11/2025 13:05, Pádraig Brady wrote:

BTW it's tempting to use tagged format in the above to simplify things for 
users,
and also avoid FAILED messages for mixed checksum input. I.e.:

   Here are the SHA256 and SHA3-256 checksums:

     SHA256 (coreutils-9.9.35-cf973.tar.gz) = 
tWYsM2przwPj1p9c1T0noDxRKTFixSWmZX5tzPZ6cW8=
     SHA3-256 (coreutils-9.9.35-cf973.tar.gz) = 
FgV2UuDSv+U3Ud9fdSA5mWRGQYZ9CAKx3wYCHiTm3Ls=
     SHA256 (coreutils-9.9.35-cf973.tar.xz) = 
BkhqCaxeKIT51WtP73fuja5ekZYb4DDhPzh88ux2glo=
     SHA3-256 (coreutils-9.9.35-cf973.tar.xz) = 
bD/kFhX/O1uQ9ciHUQygPa8YyotTBrmsV5Do+49yAV8=

   Verify the base64 SHA256 checksums with cksum --check
   from coreutils-9.2 or OpenBSD's cksum since 2007.
   Also verify the base64 SHA3-256 checksums with cksum --check from 
coreutils-9.9.

Actually the above line would then more accurately be:

  Also verify the SHA3-256 checksums with cksum --check from coreutils-9.8

cheers,
Padraig