| |||||||||||||
making the logs temper evident through git like hash chainsmaking the logs temper evident through git like hash chainsPosted Nov 20, 2011 3:12 UTC (Sun) by cmccabe (guest, #60281)In reply to: making the logs temper evident through git like hash chains by nevyn Parent article: The Journal - a proposed syslog replacement
SHA1 has been weakened, but many other hash functions have not. Given that security is the whole point, I'm sure that Lennart will use a newer hash.
(Log in to post comments)
making the logs temper evident through git like hash chains Posted Nov 20, 2011 19:19 UTC (Sun) by nevyn (subscriber, #33129) [Link]
I think you missed the point ... git and journald can happily use SHA-1 because it adds no security at all. git gets a bunch of other useful features out of using hashes, AFAICS it's just a waste for journald.
making the logs temper evident through git like hash chains Posted Nov 21, 2011 23:52 UTC (Mon) by cmccabe (guest, #60281) [Link]
> I think you missed the point ... git and journald can happily use SHA-1
> because it adds no security at all
Er, I think perhaps it is you who is missing the point. TFA says:
> Each entry authenticates all previous ones. If the top-most hash is
The point is to get security, not to "happily use SHA-1."
|
|||||||||||||