Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 926060 - GLEP 74 - remove Whirlpool hash support
Summary: GLEP 74 - remove Whirlpool hash support
Status: RESOLVED WONTFIX
Alias: None
Product: Documentation
Classification: Unclassified
Component: GLEP Changes (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: GLEP Editors
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 888884
  Show dependency tree
 
Reported: 2024-03-03 01:42 UTC by Mike Gilbert
Modified: 2024-03-03 12:58 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
patch (0001-glep-0074-Remove-Whirlpool-hash.patch,1.90 KB, patch)
2024-03-03 01:42 UTC, Mike Gilbert 		Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Mike Gilbert gentoo-dev 2024-03-03 01:42:21 UTC 
Created attachment 886567 [details, diff]
patch

Please see the attached patch to remove references to Whirlpool from GLEP 74.

We would like to remove support for this hash algorithm from Portage.

If this requires council approval let me know.
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2024-03-03 03:37:01 UTC 
Don't remove it entirely, keep it for historical reasons.  Just mark it "deprecated".  Or you can leave the spec as-is, it explicitly says they're all optional.
Comment 2 Mike Gilbert gentoo-dev 2024-03-03 04:58:30 UTC 
I’ll leave it as is then.
Comment 3 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2024-03-03 12:58:45 UTC 
For further reference, the GLEP was specifically built to avoid bias, in particular by: 1) listing all hashes that were historically supported, and 2) marking as "deprecated" only these that had known vulnerabilities.