[Rpm-maint] Porting RPM to Sequoia PGP

[Justus Winter]

Justus Winter <justus at sequoia-pgp.org> writes:

> Even though second preimage attacks on these two hash functions are
> still very expensive, the shattered paper demonstrates that hash
> collisions are enough to re-purpose an OpenPGP signature.
>
> https://shattered.io/

Sorry, I meant the SHA-1 is a Shambles paper.

https://sha-mbles.github.io/

Justus
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 519 bytes
Desc: not available
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20211101/0b73ea6c/attachment.asc>