From owner-freebsd-questions@FreeBSD.ORG Sun Mar 2 18:39:21 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 29F0C298 for ; Sun, 2 Mar 2014 18:39:21 +0000 (UTC) Received: from mxout014.mail.hostpoint.ch (mxout014.mail.hostpoint.ch [IPv6:2a00:d70:0:e::314]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id D8E551B27 for ; Sun, 2 Mar 2014 18:39:20 +0000 (UTC) Received: from [10.0.2.45] (helo=asmtp012.mail.hostpoint.ch) by mxout014.mail.hostpoint.ch with esmtp (Exim 4.80.1 (FreeBSD)) (envelope-from ) id 1WKBIE-0009Bd-BB; Sun, 02 Mar 2014 19:39:18 +0100 Received: from [178.82.41.169] (helo=hp-netbook.local) by asmtp012.mail.hostpoint.ch with esmtpsa (TLSv1.2:DHE-RSA-AES128-SHA:128) (Exim 4.80.1 (FreeBSD)) (envelope-from ) id 1WKBIE-000Jzz-4j; Sun, 02 Mar 2014 19:39:18 +0100 X-Authenticated-Sender-Id: lists@webconect.ch Date: Sun, 2 Mar 2014 19:38:55 +0100 From: Elias Diem To: Anton Sayetsky Subject: Re: Cryptografically signed ISO images Message-ID: <20140302183855.GA5308@hp-netbook.local> References: <20140302172759.GA4728@hp-netbook.local> <20140302174314.GA4932@hp-netbook.local> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Cc: FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 02 Mar 2014 18:39:21 -0000 On 2014-03-02, Anton Sayetsky wrote: > Partly. > > http://en.wikipedia.org/wiki/SHA-2 > > SHA-2 is a set of cryptographic hash functions (SHA-224, SHA-256, SHA-384, SHA-512, SHA-512/224, SHA-512/256) designed by the U.S. National Security Agency (NSA) and published in 2001 by the NIST as a U.S. Federal Information Processing Standard (FIPS). Ah well, I was looking for a signature (like PGP or something). I therefore assume that there are no crypto signatures, "only" checksums. > I forgot to say that checksums are also present in all release announcements. That might help a bit. -- Greetings Elias