git.net

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [ALL] SHA-1 vs. SHA-256


On 18 May 2018 at 16:30, Gary Gregory <garydgregory@xxxxxxxxx> wrote:
> Hi All:
>
> Eclipse is moving to SHA-256 to validate downloads [1] alongside MD5.
>
> We just updated to SHA-1 which apparently has been subject to a collision
> attack [2].
>
> Our newish commons-release-plugin has just been updated to SHA-1.
>
> I'd like to add SHA-256 alongside SHA-1.
>
> Thoughts?

Does Nexus support SHA-256?

ISTR that there were some issues with it.

> [1]
> https://www.eclipse.org/eclipse/news/4.8/platform_isv.php#equinox-sha-256-checksum
> [2]
> https://arstechnica.com/information-technology/2017/02/at-deaths-door-for-years-widely-used-sha1-function-is-now-dead/

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@xxxxxxxxxxxxxxxxxx
For additional commands, e-mail: dev-help@xxxxxxxxxxxxxxxxxx




( ! ) Warning: include(msgfooter.php): failed to open stream: No such file or directory in /var/www/git/apache-commons-developers/msg06319.html on line 96
Call Stack
#TimeMemoryFunctionLocation
10.0008363496{main}( ).../msg06319.html:0

( ! ) Warning: include(): Failed opening 'msgfooter.php' for inclusion (include_path='.:/var/www/git') in /var/www/git/apache-commons-developers/msg06319.html on line 96
Call Stack
#TimeMemoryFunctionLocation
10.0008363496{main}( ).../msg06319.html:0