blake2 is supposed to be very fast, faster than md5. It would probably break the 'scons uses stdlib only' rule though. https://blake2.net/
I assume to break scons you would have to update the same filename with its md5 collision [while keeping the timestamps the same]? People have tried to put sha1 collisions in their git repositories as test input only to find that git breaks. They can cause mischief. On Thu, Oct 26, 2017 at 10:00 AM Jonathon Reinhart < [email protected]> wrote: > I believe you will never encounter an accidental MD5 collision in the way > that SCons uses it. [1] All of the MD5 collisions being publicized are > intentional; leveraging a chosen-prefix attack. Does SCons really care to > address the case where someone is intentionally generating collisions? I > imagine not. > > MD5 is still the fastest general-purpose hashing algorithm [2]. So I so > reason for SCons to worry about changing hash algorithms. > > Jonathon Reinhart > > [1]: https://stackoverflow.com/a/937798/119527 > [2]: https://stackoverflow.com/a/2723941/119527 > > > On Thu, Oct 26, 2017 at 7:58 AM, Russel Winder <[email protected]> > wrote: > >> I may just be out of date: is SCons using MD5 for hashing? >> >> Clearly SCons is not that interested in security or true persistence >> level hashing, but given the issue of clashing might MD5 now not be >> useful? >> >> -- >> Russel. >> >> ============================================================================= >> Dr Russel Winder t: +44 20 7585 2200 voip: >> sip:[email protected] >> 41 Buckmaster Road m: +44 7770 465 077 xmpp: [email protected] >> London SW11 1EN, UK w: www.russel.org.uk skype: russel_winder >> _______________________________________________ >> Scons-dev mailing list >> [email protected] >> https://pairlist2.pair.net/mailman/listinfo/scons-dev >> >> > _______________________________________________ > Scons-dev mailing list > [email protected] > https://pairlist2.pair.net/mailman/listinfo/scons-dev >
_______________________________________________ Scons-dev mailing list [email protected] https://pairlist2.pair.net/mailman/listinfo/scons-dev
