Re: [gentoo-dev] Manifest2 hashes, take n+1-th

2017-10-19 Thread Gordon Pettey
On Thu, Oct 19, 2017 at 5:32 PM, Hanno Böck wrote: > On Thu, 19 Oct 2017 21:08:40 +0200 > Michał Górny wrote: > > > manifest-hashes = SHA512 SHA3_512 > > Counterproposal: Just use SHA512. > > There isn't any evidence that any SHA2-based hash algorithm is going to > be broken any time soon. If

Re: [gentoo-dev] Manifest2 hashes, take n+1-th

2017-10-19 Thread Hanno Böck
On Thu, 19 Oct 2017 21:08:40 +0200 Michał Górny wrote: > manifest-hashes = SHA512 SHA3_512 Counterproposal: Just use SHA512. There isn't any evidence that any SHA2-based hash algorithm is going to be broken any time soon. If that changes there will very likely be decades of warning before a b

Re: [gentoo-dev] Manifest2 hashes, take n+1-th

2017-10-19 Thread Francesco Riosa
2017-10-19 23:00 GMT+02:00 Michał Górny : > W dniu czw, 19.10.2017 o godzinie 21∶08 +0200, użytkownik Michał Górny > napisał: > > > > 4. The new hashes that are stronger and commonly available are > > SHA3/Keccak (using sponges) and BLAKE2 (HAIFA). Both are diverse from > > our current algorithms,

Re: [gentoo-dev] Manifest2 hashes, take n+1-th

2017-10-19 Thread Michał Górny
W dniu czw, 19.10.2017 o godzinie 21∶08 +0200, użytkownik Michał Górny napisał: > > 4. The new hashes that are stronger and commonly available are > SHA3/Keccak (using sponges) and BLAKE2 (HAIFA). Both are diverse from > our current algorithms, so either is a good candidate. The choice of > Keccak

[gentoo-dev] Manifest2 hashes, take n+1-th

2017-10-19 Thread Michał Górny
Hi, everyone. The previous discussion on Manifest2 hashes pretty much died away pending fixes to Portage. Since Portage was fixed a while ago, and we can now safely switch, I'd like to reboot the discussion before submitting the item for the next Council meeting. Considering all arguments made so

[gentoo-dev] Last rites: php-ext-pecl-r2 eclass

2017-10-19 Thread Brian Evans
The php-ext-pecl-r2 eclass has no more consumers and is superseded by php-ext-pecl-r3 eclass. This eclass will be removed in 30 days. Please update any overlays still using this old eclass as the move to -r3 is rather trivial [1]. The php-ext-source-r2 eclass will follow once all consumers in th

Re: [gentoo-dev] Packages up for grabs: net-analyzer/hexinject

2017-10-19 Thread Nils Freydank
Am Donnerstag, 19. Oktober 2017, 19:06:40 CEST schrieb Jonas Stein: > Dear all, > > The following packages are up for grabs: > > net-analyzer/hexinject > [...] https://github.com/gentoo/gentoo/pull/5987 I’d take care of it. Works for me on gcc-6/hardened with the version bump. -- GPG finger

[gentoo-dev] Packages up for grabs: net-analyzer/hexinject

2017-10-19 Thread Jonas Stein
Dear all, The following packages are up for grabs: net-analyzer/hexinject after retirement of the proxied maintainer. In fact is was not maintained since years, because someone forgot to remove the proxy-maint team as maintainer. https://packages.gentoo.org/packages/net-analyzer/hexinject Rece