Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 2 May 2001 18:04:44 -0500
From:      Will Andrews <will@physics.purdue.edu>
To:        Dag-Erling Smorgrav <des@ofug.org>
Cc:        Dima Dorfman <dima@unixfreak.org>, audit@FreeBSD.ORG
Subject:   Re: sha1 support in md5(1)
Message-ID:  <20010502180444.D5017@casimir.physics.purdue.edu>
In-Reply-To: <xzp4rv3l9f4.fsf@flood.ping.uio.no>; from des@ofug.org on Wed, May 02, 2001 at 11:37:19PM %2B0200
References:  <20010429213715.06D613E0B@bazooka.unixfreak.org> <xzp4rv3l9f4.fsf@flood.ping.uio.no>

next in thread | previous in thread | raw e-mail | index | archive | help

--tpzKoWRsyBhPHUC8
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, May 02, 2001 at 11:37:19PM +0200, Dag-Erling Smorgrav wrote:
[..]
> des@des ~% ln -s $(which openssl) rmd160
> des@des ~% ./rmd160 /boot/kernel/kernel
> RIPEMD160(/boot/kernel/kernel)=3D eab7dceb96a2492faee5cd3984affc05fe2afc63

Wow, that's cool stuff.

> The only possible issue is the lack of a space before the equal sign.

And the crypto algorithm specified, but really these are non-issues.  If
someone is looking for a particular part of this, there are plenty of
ways to write an awk, sed, or python/ruby/perl script to extract the
data desired.

Anyway, in light of this, I'll have to lean with DES.  If anything, you
could just add a couple LINKS to openssl.  In fact, it seems the md5(1)
program could be obsoleted entirely, although there is a slight issue
because Mk/bsd.port.mk would almost certainly be broken, and there are
probably other scripts of sorts that make assumptions based on the
spaces.  Hence, I think it's a good idea, but it needs to be carefully
considered and carried out (of course, if others agree :-).

--=20
wca

--tpzKoWRsyBhPHUC8
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE68JKMF47idPgWcsURAlOpAJ4yMN5ZwsI1f7sVBJVEQTd0c/sf+wCgjzbc
JPwFdhyTMhEFBzlOFtmoJco=
=8aLF
-----END PGP SIGNATURE-----

--tpzKoWRsyBhPHUC8--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-audit" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010502180444.D5017>