PGP keys, software security, and much more threatened by new SHA1 exploit
Peter Reutemann <[email protected]> Wed, 8 Jan 2020 10:38:47 +1300
| Newsgroups | gmane.org.user-groups.linux.waikato |
|---|---|
| Message-ID | <CAHoQ12L18xLC_cMOc7=B_7XZFY2q8ycnr+4qvZQNVPoyf1j1gw@mail.gmail.com> |
J1RocmVlIHllYXJzIGFnbywgQXJzIGRlY2xhcmVkIHRoZSBTSEExIGNyeXB0b2dyYXBoaWMgaGFz aCBhbGdvcml0aG0NCm9mZmljaWFsbHkgZGVhZCBhZnRlciByZXNlYXJjaGVycyBwZXJmb3JtZWQg dGhlIHdvcmxk4oCZcyBmaXJzdCBrbm93bg0KaW5zdGFuY2Ugb2YgYSBmYXRhbCBleHBsb2l0IGtu b3duIGFzIGEgImNvbGxpc2lvbiIgb24gaXQuIE9uIFR1ZXNkYXksDQp0aGUgZGVhZCBTSEExIGhv cnNlIGdvdCBjbG9iYmVyZWQgYWdhaW4gYXMgYSBkaWZmZXJlbnQgdGVhbSBvZg0KcmVzZWFyY2hl cnMgdW52ZWlsZWQgYSBuZXcgYXR0YWNrIHRoYXTigJlzIHNpZ25pZmljYW50bHkgbW9yZSBwb3dl cmZ1bC4NCg0KVGhlIG5ldyBjb2xsaXNpb24gZ2l2ZXMgYXR0YWNrZXJzIG1vcmUgb3B0aW9ucyBh bmQgZmxleGliaWxpdHkgdGhhbg0Kd2VyZSBhdmFpbGFibGUgd2l0aCB0aGUgcHJldmlvdXMgdGVj aG5pcXVlLiBJdCBtYWtlcyBpdCBwcmFjdGljYWwgdG8NCmNyZWF0ZSBQR1AgZW5jcnlwdGlvbiBr ZXlzIHRoYXQsIHdoZW4gZGlnaXRhbGx5IHNpZ25lZCB1c2luZyBTSEExDQphbGdvcml0aG0sIGlt cGVyc29uYXRlIGEgY2hvc2VuIHRhcmdldC4gTW9yZSBnZW5lcmFsbHksIGl0IHByb2R1Y2VzDQp0 aGUgc2FtZSBoYXNoIGZvciB0d28gb3IgbW9yZSBhdHRhY2tlci1jaG9zZW4gaW5wdXRzIGJ5IGFw cGVuZGluZyBkYXRhDQp0byBlYWNoIG9mIHRoZW0uIFRoZSBhdHRhY2sgdW52ZWlsZWQgb24gVHVl c2RheSBhbHNvIGNvc3RzIGFzIGxpdHRsZQ0KYXMgJDQ1LDAwMCB0byBjYXJyeSBvdXQuIFRoZSBh dHRhY2sgZGlzY2xvc2VkIGluIDIwMTcsIGJ5IGNvbnRyYXN0LA0KZGlkbuKAmXQgYWxsb3cgZm9y Z2VyaWVzIG9uIHNwZWNpZmljIHByZWRldGVybWluZWQgZG9jdW1lbnQgcHJlZml4ZXMgYW5kDQp3 YXMgZXZhbHVhdGVkIHRvIGNvc3QgZnJvbSAkMTEwLDAwMCB0byAkNTYwLDAwMCBvbiBBbWF6b27i gJlzIFdlYg0KU2VydmljZXMgcGxhdGZvcm0sIGRlcGVuZGluZyBvbiBob3cgcXVpY2tseSBhZHZl cnNhcmllcyB3YW50ZWQgdG8NCmNhcnJ5IGl0IG91dC4NCg0KVGhlIG5ldyBhdHRhY2sgaXMgc2ln bmlmaWNhbnQuIFdoaWxlIFNIQTEgaGFzIGJlZW4gc2xvd2x5IHBoYXNlZCBvdXQNCm92ZXIgdGhl IHBhc3QgZml2ZSB5ZWFycywgaXQgcmVtYWlucyBmYXIgZnJvbSBiZWluZyBmdWxseSBkZXByZWNh dGVkLg0KSXTigJlzIHN0aWxsIHRoZSBkZWZhdWx0IGhhc2ggZnVuY3Rpb24gZm9yIGNlcnRpZnlp bmcgUEdQIGtleXMgaW4gdGhlDQpsZWdhY3kgMS40IHZlcnNpb24gYnJhbmNoIG9mIEdudVBHLCB0 aGUgb3Blbi1zb3VyY2Ugc3VjY2Vzc29yIHRvIFBHUA0KYXBwbGljYXRpb24gZm9yIGVuY3J5cHRp bmcgZW1haWwgYW5kIGZpbGVzLiBUaG9zZSBTSEExLWdlbmVyYXRlZA0Kc2lnbmF0dXJlcyB3ZXJl IGFjY2VwdGVkIGJ5IHRoZSBtb2Rlcm4gR251UEcgYnJhbmNoIHVudGlsIHJlY2VudGx5LA0KYW5k IHdlcmUgb25seSByZWplY3RlZCBhZnRlciB0aGUgcmVzZWFyY2hlcnMgYmVoaW5kIHRoZSBuZXcg Y29sbGlzaW9uDQpwcml2YXRlbHkgcmVwb3J0ZWQgdGhlaXIgcmVzdWx0cy4NCg0KR2l0LCB0aGUg d29ybGQncyBtb3N0IHdpZGVseSB1c2VkIHN5c3RlbSBmb3IgbWFuYWdpbmcgc29mdHdhcmUNCmRl dmVsb3BtZW50IGFtb25nIG11bHRpcGxlIHBlb3BsZSwgc3RpbGwgcmVsaWVzIG9uIFNIQTEgdG8g ZW5zdXJlIGRhdGENCmludGVncml0eS4gQW5kIG1hbnkgbm9uLVdlYiBhcHBsaWNhdGlvbnMgdGhh dCByZWx5IG9uIEhUVFBTIGVuY3J5cHRpb24NCnN0aWxsIGFjY2VwdCBTSEExIGNlcnRpZmljYXRl cy4gU0hBMSBpcyBhbHNvIHN0aWxsIGFsbG93ZWQgZm9yDQppbi1wcm90b2NvbCBzaWduYXR1cmVz IGluIHRoZSBUcmFuc3BvcnQgTGF5ZXIgU2VjdXJpdHkgYW5kIFNlY3VyZQ0KU2hlbGwgcHJvdG9j b2xzLicNCg0KLS0gc291cmNlOiBodHRwczovL2Fyc3RlY2huaWNhLmNvbS9pbmZvcm1hdGlvbi10 ZWNobm9sb2d5LzIwMjAvMDEvcGdwLWtleXMtc29mdHdhcmUtc2VjdXJpdHktYW5kLW11Y2gtbW9y ZS10aHJlYXRlbmVkLWJ5LW5ldy1zaGExLWV4cGxvaXQvDQoNCkNoZWVycywgUGV0ZXINCi0tIA0K UGV0ZXIgUmV1dGVtYW5uDQpEZXB0LiBvZiBDb21wdXRlciBTY2llbmNlDQpVbml2ZXJzaXR5IG9m IFdhaWthdG8sIE5aDQorNjQgKDcpIDg1OC01MTc0DQpodHRwOi8vd3d3LmNtcy53YWlrYXRvLmFj Lm56L35mcmFjcGV0ZS8NCmh0dHA6Ly93d3cuZGF0YS1taW5pbmcuY28ubnovCl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCndsdWcgbWFpbGluZyBsaXN0IC0t IHdsdWdAbGlzdC53YWlrYXRvLmFjLm56IHwgVG8gdW5zdWJzY3JpYmUgc2VuZCBhbiBlbWFpbCB0 byB3bHVnLWxlYXZlQGxpc3Qud2Fpa2F0by5hYy5uegpVbnN1YnNjcmliZTogaHR0cHM6Ly9saXN0 LndhaWthdG8uYWMubnovcG9zdG9yaXVzL2xpc3RzL3dsdWcubGlzdC53YWlrYXRvLmFjLm56Cg==