As far as I know, Git does not deal with security but integrity. SHA-1 is used there, as a hash only instead of file names, to allow for file renames & moves with respect to a similarity index.

The fair hypothesis is that in the same repository, the chance of collision are too low to be considered.

In our concern, CURVE, we don't share the same specifications and needs.

Le 16/10/2013 15:40, shancat a écrit :

2 needs to be analysed a bit more. I think Git does something very similar but in that case it's probably to guard against repo corruption not determined attackers.



_______________________________________________
zeromq-dev mailing list
[email protected]
http://lists.zeromq.org/mailman/listinfo/zeromq-dev

Reply via email to