What are the items that are used to calculate the hash? Is the
hash salted?
------------
Scott Doctor
[email protected]
------------------
On 9/14/2015 10:53 PM, Stephan Beal wrote:
On Mon, Sep 14, 2015 at 7:46 PM, Warren Young
<[email protected] <mailto:[email protected]>> wrote:
output, and Fossil would be free to switch to a different
algorithm later if that seemed like a good idea.
Indeed, fossil's model allows any hash to be used, but it is
not possible to change the hash without a near-complete
overhaul of fossil (and its docs), nor without invalidating
every repo in existence, so it's highly unlikely to ever
happen. Supporting two hash variants in one fossil binary
would likely prove to be problematic (and would require a
major overhaul).
And indeed, maybe it is a good idea, since SHA-1 is
nearing its EOL for cryptographic use:
https://www.google.com/?q=sha-1%20end%20of%20life
Fossil does not use it in a cryptographic context, so i would
argue that that's not relevant for fossil's continued use.
Fossil only uses sha-1 to define/determine content identity.
(There are long threads somewhere in the list archives about
the changes of hash collision. Management summary: not likely
to happen for many human generations.)
--
----- stephan beal
http://wanderinghorse.net/home/stephan/
http://gplus.to/sgbeal
"Freedom is sloppy. But since tyranny's the only guaranteed
byproduct of those who insist on a perfect world, freedom will
have to do." -- Bigby Wolf
_______________________________________________
fossil-users mailing list
[email protected]
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
_______________________________________________
fossil-users mailing list
[email protected]
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
