3 ms·

So good timing to have just started working on a sha3 version of git I guess...

• deleted 10y ago
  [deleted]
• VMG 10y ago
  Funny, just yesterday I thought about what would be necessary to change and deploy this. Apparently the SHA1 hash wasn't designed as a security feature, but I would not be surprised if it is being abused as one today.
  • daenney 10y ago
    It's not used as a security feature in Git (though SHA-1 is designed as a cryptographically secure hash) but Git commit singing does use SHA-1 b/c GPG.
    • VMG 10y ago
      It's not supposed to be used as a security feature, but I think some tools use it as such. Dependency management tools that reference by SHA-1 hash come to mind. Of course they should have used other primitives all along, but we know how it is..
  • divbit 10y ago
    Let me know if you want to help- Ive just forked a couple repos and started writing out some notes