--- xml/htdocs/proj/en/glep/glep-0059.txt 2010/01/31 09:55:43 1.6 +++ xml/htdocs/proj/en/glep/glep-0059.txt 2010/02/02 05:49:27 1.7 @@ -1,7 +1,7 @@ GLEP: 59 Title: Manifest2 hash policies and security implications -Version: $Revision: 1.6 $ -Last-Modified: $Date: 2010/01/31 09:55:43 $ +Version: $Revision: 1.7 $ +Last-Modified: $Date: 2010/02/02 05:49:27 $ Author: Robin Hugh Johnson , Status: Draft Type: Standards Track @@ -105,7 +105,7 @@ development by NIST [AHS]), they should be considered and used. The SHA512 algorithm is available in Python 2.5, which has been a -dependency of Portage since approximately Python 2.1.6.13. +dependency of Portage since approximately Portage 2.1.6.13. The WHIRLPOOL checksum is not available within the PyCrypto library or hashlib that is part of Python 2.5, but there are multiple alternative @@ -135,6 +135,10 @@ Old versions of Portage may support and expect only specific checksums. This is accounted for in the checksum depreciation discussion. +For maximum compatiability, we should only have to include each of the +old algorithms that we are officially still supporting, as well as the +new ones that we prefer. + References ==========