[tor-bugs] #9811 [Tor Sysadmin Team]: use sha256 or sha512 instead of sha1 for deb.torproject.org

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Sep 24 00:01:32 UTC 2013


#9811: use sha256 or sha512 instead of sha1 for deb.torproject.org
-------------------------------+------------------------
 Reporter:  proper             |          Owner:  weasel
     Type:  defect             |         Status:  new
 Priority:  normal             |      Milestone:
Component:  Tor Sysadmin Team  |        Version:
 Keywords:                     |  Actual Points:
Parent ID:  #1869              |         Points:
-------------------------------+------------------------
 For example
 http://deb.torproject.org/torproject.org/dists/tor-0.2.4.x-jessie/InRelease
 currently uses Hash: SHA1. Please use a stronger hash, such as sha256 or
 sha512.

 I believe, if you add

 {{{
 personal-digest-preferences SHA512
 cert-digest-algo SHA512
 default-preference-list SHA512 SHA384 SHA256 SHA224 AES256 AES192 AES
 CAST5 ZLIB BZIP2 ZIP Uncompressed
 }}}

 to ~/.gnupg/gpg.conf that should do the trick.

 Otherwise try "gpg --edit-key your at mail", setpref, SHA512 SHA384 SHA256
 SHA224 AES256 AES192 AES CAST5 ZLIB, save.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9811>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list