[PATCH] doc: Replace examples of MD5 and SHA1 with SHA256

Sean Anderson seanga2 at gmail.com
Sat Dec 2 20:38:09 CET 2023


On 12/2/23 14:33, Sean Anderson wrote:
> Both SHA1 and (especially) MD5 are no longer as safe as they once were for
> cryptographic use. Replaces examples which use them with examples using
> SHA256 instead. This will provide more-secure defaults for users who use
> documentation examples as a base for their own use. This is not too
> necessary for non-verified-boot scenarios (since someone could just replace
> the checksum), but I wanted to be complete.
> 
> Signed-off-by: Sean Anderson <seanga2 at gmail.com>
> ---

I forgot to mention this in the commit message, but all the new hashes were generated like

echo fake kernel hash | sha256sum

which should be fine, since the actual values were just for example anyway.

--Sean



More information about the U-Boot mailing list