SHA256 replaces MD5 in OpenBSD snapshots

[J65nko]

A note for OpenBSD snapshot trackers

Since a few days ago the OpenBSD snapshots use sha256 for checksumming instead of md5.

       96413 Apr 20 13:20 INSTALL.i386
       22356 Apr 20 13:21 INSTALL.linux
        2162 Apr 20 13:21 SHA256
    48264705 Apr 20 13:21 base45.tgz
     6726973 Apr 20 13:21 bsd
     6746319 Apr 20 13:21 bsd.mp
     5657948 Apr 20 13:21 bsd.rd
     5775360 Apr 20 13:21 cd45.iso
       44724 Apr 20 13:21 cdboot
        2048 Apr 20 13:21 cdbr
     3012608 Apr 20 13:21 cdemu45.iso
    90059567 Apr 20 13:21 comp45.tgz
      513503 Apr 20 13:21 etc45.tgz
     1474560 Apr 20 13:21 floppy45.fs
     1474560 Apr 20 13:21 floppyB45.fs
     1474560 Apr 20 13:21 floppyC45.fs
     2619863 Apr 20 13:21 game45.tgz
         269 Apr 20 13:21 index.txt
   240404480 Apr 20 13:21 install45.iso
     8236755 Apr 20 13:20 man45.tgz
     2935082 Apr 20 13:20 misc45.tgz
       53276 Apr 20 13:21 pxeboot
    10010661 Apr 19 22:46 xbase45.tgz
       68991 Apr 19 22:46 xetc45.tgz
    35580333 Apr 19 22:46 xfont45.tgz
    19912164 Apr 19 22:46 xserv45.tgz
     2839793 Apr 19 22:46 xshare45.tgz

[BSDfan666]

I just read about this, marc.info has been done for a few days.. so I had some catching up to do.

In the long run, SHA256 hashes are much better.. not that I think MD5 is totally useless.

[s2scott]

In context, the move to SHA256 from SHA-1 (128) is probably intended to decrease the likelihood of a hash collision, readers may find the following link of interest on approved crypto strengths and crypto-material-at-key-strength retention periods.

http://www.cse-cst.gc.ca/documents/publications/itsa-asti/itsa11d-eng.pdf

Accordingly, SHA-1, as a crypto component, is disallowed as of 2008/12 by the above Canadian govt standards.

It's interesting to see what algorithms and key-strengths are deprecating in 2010.

/S

[BSDfan666]

Just an added bonus, the new SHA256 hash file contains the xenocara sets now.