[Rpm-ecosystem] Some points about zchunk

Jonathan Dieter jdieter at gmail.com
Sun Jul 8 20:28:28 UTC 2018


On Sun, 2018-07-08 at 19:45 +0100, Jonathan Dieter wrote:
> On Fri, 2018-07-06 at 11:48 +0000, Michael Schroeder wrote:
> > Ah, no, I think you misunderstood. Do *not* add md5 support. In fact,
> > I'd ask you to remove sha1 support as well to make your code smaller.
> > 
> > My point is that you shouldn't use 20 bytes just for chunk identification
> > purposes. As you said, it doesn't need to be cryptographically sound, we
> > don't have to make sure it withstands an attacker.
> > Just use the first 8 bytes of the sha256 sum instead (or sha512, as
> > it's a bit faster than sha256 IIRC).
> 
> Ok, that makes sense.  I'll add it as a new hash type (SHA512_64?) and
> make it the default for the chunk checksum.

Ok, I've added two new hash types, ZCK_HASH_SHA512 and
ZCK_HASH_SHA512_64.  The latter is the new default for chunk hashes.

https://github.com/zchunk/zchunk/commit/abdfa43ea05b1b3d6dbd3b330572abe
eb0d8444f

I think I'll leave the SHA1 support in, at least for a while, since
it's been the default chunk hash up until now, and I'd hate to break
any zchunk files that people might have created.

Jonathan


More information about the Rpm-ecosystem mailing list