Re: Is OpenBSD using SHA1 anywhere?

2017-03-04 Thread Flipchan
>>> Sent: Thursday, February 23, 2017 at 5:27 PM >>> From: "Christian Weisgerber" <na...@mips.inka.de> >>> To: misc@openbsd.org >>> Subject: Re: Is OpenBSD using SHA1 anywhere? >>> >>> On 2017-02-23, Marc Espie <es...@nerim.net>

Re: Is OpenBSD using SHA1 anywhere?

2017-02-25 Thread ludovic coues
-i-lost-my-openbsd-fde-password/ > I seen that "sha1" is still used, but afaik 6.1 will have a different FDE. > >> Sent: Thursday, February 23, 2017 at 5:27 PM >> From: "Christian Weisgerber" <na...@mips.inka.de> >> To: misc@openbsd.org >> Su

Re: Is OpenBSD using SHA1 anywhere?

2017-02-25 Thread minek van
enbsd.org > Subject: Re: Is OpenBSD using SHA1 anywhere? > > On 2017-02-23, Marc Espie <es...@nerim.net> wrote: > > > Talking from the ports side, ports and packages moved to SHA256 > > back in 2007/2008. > > To be expressly clear: Marc is referring to the ports

Re: Is OpenBSD using SHA1 anywhere?

2017-02-23 Thread Christian Weisgerber
On 2017-02-23, Marc Espie wrote: > Talking from the ports side, ports and packages moved to SHA256 > back in 2007/2008. To be expressly clear: Marc is referring to the ports and packages infrastructure here. The packaged third-party software still contains many uses of SHA1;

Re: Is OpenBSD using SHA1 anywhere?

2017-02-23 Thread Marc Espie
On Thu, Feb 23, 2017 at 04:06:25PM +0100, Marc Espie wrote: > On Thu, Feb 23, 2017 at 03:44:13PM +0100, minek van wrote: > > fyi, > > > > https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html > > https://shattered.it/ > > Talking from the ports side, ports and packages

Re: Is OpenBSD using SHA1 anywhere?

2017-02-23 Thread Marc Espie
On Thu, Feb 23, 2017 at 03:44:13PM +0100, minek van wrote: > fyi, > > https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html > https://shattered.it/ Talking from the ports side, ports and packages moved to SHA256 back in 2007/2008. Ports distinfo made it the only default

Is OpenBSD using SHA1 anywhere?

2017-02-23 Thread minek van
fyi, https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html https://shattered.it/