Bug#1144310: ITP: rust-md4 -- MD4 hash function - Rust source code

Roland Clobus <[email protected]> Fri, 14 Aug 2026 07:53:07 +0200

Newsgroups	gmane.linux.debian.devel.wnpp
Message-ID	<24103d6b-7520-4806-96a0-3050b4d7a5f3__20423.6741688632$1786686929$gmane$org@rclobus.nl>

Hello Peter,

On 13/08/2026 15:57, Peter Pentchev wrote:
> * Package name    : rust-md4
>    Description     : MD4 hash function - Rust source code
> 
>   This is an implementation of the (really weak!) MD4 hash
>   algorithm in Rust. Its only purpose in the Debian archive is
>   to allow the build of the donkey S/Key one-time-password tool.

If it should only be used by this password tool, and it is a very weak algorithm, would it be an option to remove all invocations of the MD4 hash code in the upstream code?

With kind regards,
Roland Clobus

OpenPGP_signature.asc (application/pgp-signature, 833 B)