this is not meant to be cryptographic authenticity check.
it's meant to be a quick check against media corruption.
for authenticity checks we do publish sha256sum of the .iso, gpg sign
the package pool, and gpg sign filesystem.squashfs for when booting over
the network.
md5sum is fastest CRC like function. If there is anything faster we
would use that. I.e. we might use blake3 instead. But not sha256 it's
very slow.
** Changed in: casper (Ubuntu)
Status: New => Opinion
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1897930
Title:
use something better than md5sum to verify image contents
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/casper/+bug/1897930/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
