3 ms·
I noticed this new certificate Apple issued is still using SHA-1 as its signature algorithm. I wonder why Apple didn't make the jump to SHA-2 based signatures.
by zmanfx 11y ago
I noticed this new certificate Apple issued is still using SHA-1 as its signature algorithm. I wonder why Apple didn't make the jump to SHA-2 based signatures.
- fairplayd 11y agoThey recently added support for SHA-256 (both full digest and truncated to 160 bits) hashes in their codesign system. I haven't seen it on iOS yet and suspect that it is only for OS X at the moment.
- fairplayd 11y agoAlso, a 3GS at least has HW acceleration for AES, SHA-1, and some sort of RSA bignum acceleration. Not sure what the new HW has but I suspect backwards compatibility may be a reason for holding SHA-1++ back on iOS.
- smackfu 11y agoIIRC, because last time they tried using SHA-2, it broke a lot of OS X apps that were using an embedded older version of OpenSSL that didn't support it.