[PATCH] doc: Replace examples of MD5 and SHA1 with SHA256

Simon Glass sjg at chromium.org
Sun Dec 3 18:44:33 CET 2023


Hi Sean,

On Sat, 2 Dec 2023 at 12:38, Sean Anderson <seanga2 at gmail.com> wrote:
>
> On 12/2/23 14:33, Sean Anderson wrote:
> > Both SHA1 and (especially) MD5 are no longer as safe as they once were for
> > cryptographic use. Replaces examples which use them with examples using
> > SHA256 instead. This will provide more-secure defaults for users who use
> > documentation examples as a base for their own use. This is not too
> > necessary for non-verified-boot scenarios (since someone could just replace
> > the checksum), but I wanted to be complete.
> >
> > Signed-off-by: Sean Anderson <seanga2 at gmail.com>
> > ---
>
> I forgot to mention this in the commit message, but all the new hashes were generated like
>
> echo fake kernel hash | sha256sum
>
> which should be fine, since the actual values were just for example anyway.

Ah, I was wondering about that.

Reviewed-by: Simon Glass <sjg at chromium.org>

Regards,
Simon


More information about the U-Boot mailing list