On Thu, Nov 21, 2013 at 10:29:39AM +0100, Tomas Mraz wrote: > On St, 2013-11-20 at 20:33 +0000, Richard W.M. Jones wrote: > > See: > > https://github.com/ocaml/ocaml/blob/trunk/byterun/md5.c#L78 > > > > (1) In terms of the bundled(md5-$IMPLEMENTATION), which > > $IMPLEMENTATION is this? > > It is bundled(md5-plumb) > > > (2) Ideally I would like to replace this with a call to a library (in > > Fedora, I don't think this would be accepted upstream). But which > > library should I use? > > I'd probably use libgcrypt. However if the MD5 is not used for security > related purpose, which it should not be used for due to its brokenness > anyway, I am not sure it is worth it to replace the bundled copy with a > library call. FWIW it is used to implement an OCaml library module (Digest) which is used by the compiler for making a unique hash over module interfaces so we can tell if they are compatible / have changed. It's not used for any security-related purpose. Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones virt-top is 'top' for virtual machines. Tiny program with many powerful monitoring features, net stats, disk stats, logging, etc. http://people.redhat.com/~rjones/virt-top -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
