Public SourceMage Discussion List

["Sergey A. Lipnevich" <sergey AT optimaltec.com>]

Quoting Eric Sandall <eric AT sandall.us>:

> If we do go for allowing hashsums we'll want to make sure they're as
> close to being as good as the GPG signatures, which use sha512 at the
> moment. So all hashsums would have to be done with sha512.

As long as it takes less then one minute to compute on a modern CPU I'm 
OK with
it.

And if we pick this one hash algorithm as mandatory and outlaw all others, I'm
still OK with it. Will this make sorcery team's life easier?

Sergey.