Git's usage of SHA1
grarpamp <[email protected]> Mon, 8 Feb 2016 13:52:43 -0500
| Newsgroups | gmane.comp.version-control.monotone.devel |
|---|---|
| Message-ID | <CAD2Ti28uV1s1Qz-RgqEBT8Jci95E_v1QK8LDLFGQzYoow_vmLQ@mail.gmail.com> |
A long thread on the below list with the above subject (that SHA1 is more or less broken and should be proactively replaced along the lines of other general global movements off of SHA1) mentioned the snippet below. The same subject should be given consideration in monotone as well. https://lists.sonic.net/mailman/private/crypto-practicum/2016q1/thread.html Also, historically speaking git's usage of SHA1 almost certainly came from monotone (monotone.ca), which Linus used as inspiration for git. They still use SHA1, but it sounds like it would be much easier to replace there than in git. There were some design talk and thread links in there for anyone interested to subscribe to the sonic c-p archives. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=813157 https://git.wiki.kernel.org/index.php/LinusTalk200705Transcript https://github.com/jayphelps/git-blame-someone-else