Re: Proposal: Remove MD5 / SHA1 support from veriexec

Sevan Janiyan <[email protected]> Sun, 27 Aug 2017 21:47:44 +0100

Newsgroups	gmane.os.netbsd.devel.security
Message-ID	<[email protected]>

On 08/22/17 05:26, Thor Lancelot Simon wrote:
> Neither of these is a cipher.  What attack exactly are you worried about?

Sorry, my mistake. It was getting late.
What am I worried about? hash functions which suffer from collision
attacks being used for a tamper resistance tool.

> It would make sense to me to remove MD5 support.

*nod*

Sevan