8000 cmake: warn for not using sha1dc by ethomson · Pull Request #6986 · libgit2/libgit2 · GitHub
[go: up one dir, main page]

Skip to content

cmake: warn for not using sha1dc #6986

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Dec 28, 2024
Merged

cmake: warn for not using sha1dc #6986

merged 1 commit into from
Dec 28, 2024

Conversation

ethomson
Copy link
Member

git's hash algorithm is sha1dc, it is not sha1. Per Linus:

Honestly, git has effectively already moved from SHA1 to SHA1DC.

So the actual known attack and weakness of SHA1 should simply not be
part of the discussion for the next hash. You can basically say "we're
already on the second hash, we just picked one that was so
compatible with SHA1 that nobody even really noticed.

Warn users who try to compile with SHA1 instead of SHA1DC.

git's hash algorithm is sha1dc, it is not sha1. Per Linus:

> Honestly, git has effectively already moved from SHA1 to SHA1DC.
>
> So the actual known attack and weakness of SHA1 should simply not be
> part of the discussion for the next hash. You can basically say "we're
> _already_ on the second hash, we just picked one that was so
> compatible with SHA1 that nobody even really noticed.

Warn users who try to compile with SHA1 instead of SHA1DC.
@ethomson ethomson merged commit a8fbbf7 into main Dec 28, 2024
17 checks passed
@ethomson ethomson deleted the ethomson/warn_sha1 branch January 3, 2025 09:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant
0