Re: [gentoo-portage-dev] [GLEP59v2 2/5] Manifest2 hash: Whirlpool

2011-10-01 Thread Zac Medico
On 10/01/2011 02:41 AM, Brian Harring wrote: > On Sat, Oct 01, 2011 at 07:40:52AM +, Robin H. Johnson wrote: >> From: "Robin H. Johnson" >> >> Provide public-domain implementation of the Whirlpool hash algorithm to >> be used as new Manifest2 hash. >> >> Signed-off-by: Robin H. Johnson >> ---

Re: [gentoo-portage-dev] [GLEP59v2 5/5] GLEP59: Change live Manifest2 hashes to SHA256, SHA512, WHIRLPOOL

2011-10-01 Thread Zac Medico
On 10/01/2011 09:40 PM, Zac Medico wrote: > On 10/01/2011 12:40 AM, Robin H. Johnson wrote: >> diff --git a/pym/portage/const.py b/pym/portage/const.py >> index 8b5f4ac..a42ebe8 100644 >> --- a/pym/portage/const.py >> +++ b/pym/portage/const.py >> @@ -109,10 +109,12 @@ EAPI = 4

Re: [gentoo-portage-dev] [GLEP59v2 5/5] GLEP59: Change live Manifest2 hashes to SHA256, SHA512, WHIRLPOOL

2011-10-01 Thread Zac Medico
On 10/01/2011 12:40 AM, Robin H. Johnson wrote: > diff --git a/pym/portage/const.py b/pym/portage/const.py > index 8b5f4ac..a42ebe8 100644 > --- a/pym/portage/const.py > +++ b/pym/portage/const.py > @@ -109,10 +109,12 @@ EAPI = 4 > > HASHING_BLOCKSIZE= 32768 > MANIFE

Re: [gentoo-portage-dev] [PATCH 1/4] Manifest2 hash: Whirlpool

2011-10-01 Thread Robin H. Johnson
On Sat, Oct 01, 2011 at 02:08:57PM -0400, Mike Frysinger wrote: > On Thursday, September 29, 2011 21:27:39 Robin H. Johnson wrote: > > Provide public-domain implementation of the Whirlpool hash algorithm to > > be used as new Manifest2 hash. > > > > Signed-off-by: Robin H. Johnson > > --- > > py

Re: [gentoo-portage-dev] [PATCH 1/4] Manifest2 hash: Whirlpool

2011-10-01 Thread Alec Warner
On Sat, Oct 1, 2011 at 11:08 AM, Mike Frysinger wrote: > On Thursday, September 29, 2011 21:27:39 Robin H. Johnson wrote: >> Provide public-domain implementation of the Whirlpool hash algorithm to >> be used as new Manifest2 hash. >> >> Signed-off-by: Robin H. Johnson >> --- >>  pym/portage/check

Re: [gentoo-portage-dev] [PATCH 1/4] Manifest2 hash: Whirlpool

2011-10-01 Thread Mike Frysinger
On Thursday, September 29, 2011 21:27:39 Robin H. Johnson wrote: > Provide public-domain implementation of the Whirlpool hash algorithm to > be used as new Manifest2 hash. > > Signed-off-by: Robin H. Johnson > --- > pym/portage/checksum.py |4 + > pym/portage/util/whirlpool.py | 788 >

Re: [gentoo-portage-dev] [GLEP59v2 2/5] Manifest2 hash: Whirlpool

2011-10-01 Thread Brian Harring
On Sat, Oct 01, 2011 at 07:40:52AM +, Robin H. Johnson wrote: > From: "Robin H. Johnson" > > Provide public-domain implementation of the Whirlpool hash algorithm to > be used as new Manifest2 hash. > > Signed-off-by: Robin H. Johnson > --- > pym/portage/checksum.py |8 ++-- > 1 fil

[gentoo-portage-dev] [GLEP59v2 1/5] Refactor RMD160 hashlib code for less-hardcoding

2011-10-01 Thread Robin H. Johnson
From: "Robin H. Johnson" To be used shortly for WHIRLPOOL as well as RMD160. Signed-off-by: Robin H. Johnson --- pym/portage/checksum.py | 21 - 1 files changed, 12 insertions(+), 9 deletions(-) diff --git a/pym/portage/checksum.py b/pym/portage/checksum.py index 9e7e455

[gentoo-portage-dev] [GLEP59v2 5/5] GLEP59: Change live Manifest2 hashes to SHA256, SHA512, WHIRLPOOL

2011-10-01 Thread Robin H. Johnson
From: "Robin H. Johnson" Change Manifest2 hashes to a more secure set as approved in GLEP59. SHA512 and WHIRLPOOL are added, SHA1 and RMD160 are dropped. SHA256 is now the lowest security hash, and must remain in Manifest files for at least 1 year, otherwise older Portage installs will complain

[gentoo-portage-dev] [GLEP59v2 0/5] GLEP59: Manifest2 hash types

2011-10-01 Thread Robin H. Johnson
Respun now with the help of ferringb. Cleans up the implementation and catches a few bug and improvements: - mhash priority moved lower than pycrypto/hashlib because mhash holds GIL while the other implementations don't. - hashlib does offer whirlpool if it was built against openssl 1.0. 1/5: Re

[gentoo-portage-dev] [GLEP59v2 2/5] Manifest2 hash: Whirlpool

2011-10-01 Thread Robin H. Johnson
From: "Robin H. Johnson" Provide public-domain implementation of the Whirlpool hash algorithm to be used as new Manifest2 hash. Signed-off-by: Robin H. Johnson --- pym/portage/checksum.py |8 ++-- 1 files changed, 6 insertions(+), 2 deletions(-) diff --git a/pym/portage/checksum.py b/

[gentoo-portage-dev] [GLEP59v2 4/5] Manifest2 hash backend provider: mhash

2011-10-01 Thread Robin H. Johnson
From: "Robin H. Johnson" Offer mhash as a provider for Manifest2 hash generation and validation. This is important as either of pycrypto or fchksum offer an accelerated Whirlpool implementation, and hashlib might not offer it. Additionally, the mhash implementation is accelerated and ships with a

[gentoo-portage-dev] [GLEP59v2 3/5] Manifest2 hash: SHA512

2011-10-01 Thread Robin H. Johnson
From: "Robin H. Johnson" Provide SHA512 hash algorithm to be used as new Manifest2 hash. Signed-off-by: Robin H. Johnson --- pym/portage/checksum.py |1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/pym/portage/checksum.py b/pym/portage/checksum.py index 3593686..40ae836