tech-security archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Proposal: Remove MD5 / SHA1 support from veriexec



Hello,
As a two part process, I propose we remove the ability to generate
signatures using SHA1/MD5 with veriexecgen as a part of NetBSD 8.
Then in HEAD for NetBSD 9, we remove support for these hashes from the
remaining components & kernel configuration files.

Part 1:
http://www.netbsd.org/~sevan/patch-veriexecgen.txt

Part 2:
http://www.netbsd.org/~sevan/patch-veriexec-nomd5-sha1.txt

Thoughts / objections?


Sevan


Home | Main Index | Thread Index | Old Index