[Gnu-arch-users] sha1 news

[Thomas Lord]

Some news about SHA1 that is, perhaps, relevant to past
debates among arch hackers.


http://www.smh.com.au/news/world/hail-to-the-
chief/2005/09/12/1126377257226.html?oneclick=true


Not that revc is going anywhere but I'd like to note
for the record that while the current code base happens
to be vulnerable to SHA1 punning, it is *also* *explicitly*
and *carefully* designed so that that is just a ramp-up
condition -- it ultimately does not rely on the security
of any hash function, whatsoever.  The design uses SHA1 just as
a redundant check of data integrity and as a source of
significant performance optimizations.

-t