On Mon, 2006-06-26 at 07:25 -0600, Stephen John Smoogen wrote:
On 6/25/06, Steve G <linux_4ever(a)yahoo.com> wrote:
> Hi,
>
> I just wanted everyone to understand the significance of this announcement:
>
> >coreutils-5.96-4
> >----------------
> >* Sun Jun 25 2006 Tim Waugh <twaugh(a)redhat.com> 5.96-4
> >- Include new hashes (bug #196369). Patch from upstream.
> >- Build at -O1 on s390 for the moment (bug #196369).
>
>
> This adds sha224sum, sha256sum, sha384sum, and sha512sum utilities to the
> distribution. Attacks on md5sum have been getting better over the last 2 years.
> While md5sum is not broken, I think its time to consider migrating to sha256sum
> everywhere in the distribution.
>
Hurray. We have been told that computer systems that are covered by
FISMA are supposed to use a minimum of SHA-256 when doing baselines of
systems. Now to get a baseline tool that uses this AND is prelink
aware.
The RPM maintainer has already expressed displeasure with the idea of
replacing SHA-1 with something better, so don't bother wasting your time
there.
--
Nicholas Miell <nmiell(a)comcast.net>