Re: [PATCH] 1.10 Release notes and FAQ around SHA-1

Hi,

On 08/05/17 10:46, Jacek Materna wrote:
>
> Install a pre-commit hook that will reject new instances against known
> collisions. While this will not guarantee protection from new
> collisions, we will keep the hook up-to date as new collisions are
> publicly released.
>
>
> The hook can be found
> here:https://svn.apache.org/repos/asf/subversion/trunk/tools/hook-scripts/reject-known-sha1-collisions.sh
>

I am not sure if this is suitable for a general audience, but I made
another hook that uses counter-cryptanalysis. It needs
https://github.com/cr-marcstevens/sha1collisiondetection/commit/5ee29e5e3e57015800f2eb6ced4cd28dd639e6dd

https://svn.apache.org/viewvc?view=revision&revision=1794454
https://svn.apache.org/viewvc/subversion/trunk/tools/hook-scripts/reject-detected-sha1-collisions.sh?view=markup&pathrev=1794454
https://svn.apache.org/repos/asf/subversion/trunk/tools/hook-scripts/reject-detected-sha1-collisions.sh

Have fun,
Andreas
Received on 2017-05-08 23:19:53 CEST