Re: Proposal: Remove MD5 / SHA1 support from veriexec
Sevan Janiyan <[email protected]> Tue, 22 Aug 2017 01:50:30 +0100
| Newsgroups | gmane.os.netbsd.devel.security |
|---|---|
| Message-ID | <[email protected]> |
It seem I forgot a couple of things, the reason why I'm proposing the change is because these ciphers are broken and are of no benefit in the context of this tool. I'm proposing the staged process as a migration path rather than ripping it flat out for NetBSD 8 though I have no objection to doing that if folks are happy with that. On 08/22/17 00:12, Sevan Janiyan wrote: > Part 2: > http://www.netbsd.org/~sevan/patch-veriexec-nomd5-sha1.txt This diff has been updated to cover all references to VERIFIED_EXEC_FP_MD5 & SHA1. Sevan