[gentoo-dev] Last rites: net-im/qutim

2017-10-21 Thread Andreas Sturmlechner
$subject or a new maintainer comes up with a port to Qt5. # Andreas Sturmlechner (22 Oct 2017) # Reverse-deps on dead, masked Qt4WebKit. Bug #623928 net-im/qutim

[gentoo-dev] Last rites: Several kdelibs4/Qt4 rdeps

2017-10-21 Thread Andreas Sturmlechner
# Andreas Sturmlechner (21 Oct 2017) # Dead upstream, depends on dead kdelibs4/Qt4. # Masked for removal in 30 days. Bug #629018 sci-calculators/keurocalc # Andreas Sturmlechner (21 Oct 2017) # Dead upstream, depends on dead kdelibs4/Qt4. # Masked for

Re: [gentoo-dev] Gentoo QA Help

2017-10-21 Thread Jonas Stein
Hi Michael, > As some of you may noticed i started to clean up some old patches in the > gentoo portage tree. I did so already a while ago, and like before I'm > using a small script in order to identify unused patches. > > I few days ago i started to hack again on that script and thought about

[gentoo-dev] Re: Manifest2 hashes, take n+1-th

2017-10-21 Thread Duncan
Hanno Böck posted on Sat, 21 Oct 2017 19:50:11 +0200 as excerpted: > On Sat, 21 Oct 2017 12:12:44 -0500 R0b0t1 wrote: > >> People are discussing collision resistance, but no one here appears to >> be trained in cryptography. > > For the record, I'd claim I am. ... And with a

Re: [gentoo-dev] Manifest2 hashes, take n+1-th

2017-10-21 Thread Hanno Böck
On Sat, 21 Oct 2017 12:12:44 -0500 R0b0t1 wrote: > That is precisely why I didn't suggest it be used on its own (see note > about extant use of MD5), and why I gave alternatives. If it is > desired that the hashes be computed quickly then weaker hashes will > need to be used.

Re: [gentoo-dev] Manifest2 hashes, take n+1-th

2017-10-21 Thread R0b0t1
On Sat, Oct 21, 2017 at 12:12 PM, R0b0t1 wrote: > On Sat, Oct 21, 2017 at 11:26 AM, Robin H. Johnson wrote: >> On Fri, Oct 20, 2017 at 05:21:47PM -0500, R0b0t1 wrote: >>> I would like to present my suggestions: >>> >>> SHA512, (RIPEMD160 | WHIRLPOOL |

Re: [gentoo-dev] Manifest2 hashes, take n+1-th

2017-10-21 Thread R0b0t1
On Sat, Oct 21, 2017 at 11:26 AM, Robin H. Johnson wrote: > On Fri, Oct 20, 2017 at 05:21:47PM -0500, R0b0t1 wrote: >> I would like to present my suggestions: >> >> SHA512, (RIPEMD160 | WHIRLPOOL | BLAKE2B), (SHA3_512 | BLAKE2B); >> >> or more definitively: >> >> SHA512,

Re: [gentoo-dev] Manifest2 hashes, take n+1-th

2017-10-21 Thread Robin H. Johnson
On Fri, Oct 20, 2017 at 05:21:47PM -0500, R0b0t1 wrote: > I would like to present my suggestions: > > SHA512, (RIPEMD160 | WHIRLPOOL | BLAKE2B), (SHA3_512 | BLAKE2B); > > or more definitively: > > SHA512, RIPEMD160, BLAKE2B. Please do NOT reintroduce RIPEMD160. It was one of the older Portage

[gentoo-dev] Last rites: dev-perl/File-Stat-Moose

2017-10-21 Thread Kent Fredric
# Kent Fredric (21 Oct 2017) # Has not been usable since we cleaned the last Moose it worked on back # in 2012. Removal in 30 days. Bug #634938 dev-perl/File-Stat-Moose pgpLCMq5sFeDL.pgp Description: OpenPGP digital signature

Re: [gentoo-dev] Manifest2 hashes, take n+1-th

2017-10-21 Thread Michał Górny
W dniu sob, 21.10.2017 o godzinie 10∶01 +0200, użytkownik Paweł Hajdan, Jr. napisał: > On 20/10/2017 18:15, Michał Górny wrote: > > W dniu pią, 20.10.2017 o godzinie 17∶42 +0200, użytkownik Paweł Hajdan, > > Jr. napisał: > > > Curious, do we have any measurements/estimates of the performance cost?

Re: [gentoo-dev] Manifest2 hashes, take n+1-th

2017-10-21 Thread Paweł Hajdan , Jr .
On 20/10/2017 18:15, Michał Górny wrote: > W dniu pią, 20.10.2017 o godzinie 17∶42 +0200, użytkownik Paweł Hajdan, > Jr. napisał: >> Curious, do we have any measurements/estimates of the performance cost? > > With a single thread serial processing of all hashes, it's just sum of > times involved

Re: [gentoo-dev] Manifest2 hashes, take n+1-th

2017-10-21 Thread Michał Górny
W dniu sob, 21.10.2017 o godzinie 04∶08 +0200, użytkownik Chí-Thanh Christopher Nguyễn napisał: > Michał Górny schrieb: > > to: > > > > manifest-hashes = SHA512 SHA3_512 > > +1 > > Just wondering about the performance argument on weak systems: > Does Portage absolutely have to check all of

Re: [gentoo-dev] Manifest2 hashes, take n+1-th

2017-10-21 Thread Michał Górny
W dniu sob, 21.10.2017 o godzinie 04∶01 +0200, użytkownik Jason A. Donenfeld napisał: > Blake2 is in coreutils already, provides an excellent security margin, and > is considerably faster than both sha2 and sha3. > Yes, we've already switched the proposal to BLAKE2B. Although it is only faster