[tor-bugs] #29614 [Applications/Tor Browser]: Use SHA-256 algorithm for Windows authenticode timestamping

Tue Apr 21 04:38:51 UTC 2020

#29614: Use SHA-256 algorithm for Windows authenticode timestamping
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  gk
     Type:  defect                               |         Status:
                                                 |  needs_review
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-sign, tbb-security, tbb-8.5,     |  Actual Points:
  GeorgKoppen202004, TorBrowserTeam202004R       |
Parent ID:  #33168                               |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by cypherpunks):

 Works on Windows 7 and later.
 Note: besides changing `SHA-1` to `SHA-256`, you also change `Authenticode
 timestamping` to `RFC 3161 timestamping` (see
 https://sectigo.com/resources/time-stamping-server).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/29614#comment:18>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online