Re: SHA1 collisions found

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



From: "Stefan Beller" <sbeller@xxxxxxxxxx>
On Fri, Feb 24, 2017 at 10:14 AM, Junio C Hamano <gitster@xxxxxxxxx> wrote:

you are inviting people to start using

    md5,54ddf8d47340e048166c45f439ce65fd

as object names.

which might even be okay for specific subsets of operations.
(e.g. all local work including staging things, making local "fixup" commits)

The addressing scheme should not be too hardcoded, we should rather
treat it similar to the cipher schemes in pgp. The additional complexity that
we have is the longevity of existence of things, though.


One potential nicety of using the md5 is that it is a known `toy problem` solution that could be used to explore how things might be made to work, without any expectation that the temporary code is in any way an experimental part of regular code. Maybe. It's good to have a toy problem to work on.

There are other issue to be considered as well, such as validating a transition of identical blobs and trees (at some point there will for some users be a forced update of hash of unchanged code), which probably requires two way traversal.

Philip



[Index of Archives]     [Linux Kernel Development]     [Gcc Help]     [IETF Annouce]     [DCCP]     [Netdev]     [Networking]     [Security]     [V4L]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux SCSI]     [Fedora Users]