On Thu, 19 Oct 2017 21:08:40 +0200 Michał Górny <mgo...@gentoo.org> wrote:
> manifest-hashes = SHA512 SHA3_512 Counterproposal: Just use SHA512. There isn't any evidence that any SHA2-based hash algorithm is going to be broken any time soon. If that changes there will very likely be decades of warning before a break becomes practical. Having just one hash is simpler and using a well supported one like SHA512 may make things easier than using something that's still not very widely supported. -- Hanno Böck https://hboeck.de/ mail/jabber: ha...@hboeck.de GPG: FE73757FA60E4E21B937579FA5880072BBB51E42