Date: Sun, 2 Mar 2014 08:52:56 -1000 From: Kent Kuriyama <kent.kuriyama@gmail.com> To: FreeBSD Questions <freebsd-questions@freebsd.org> Subject: Re: Cryptografically signed ISO images Message-ID: <CACArijBNZL=OPwa1_0CTkF6uaEt8N=oU_X4B8RdDw87UcBhcVA@mail.gmail.com> In-Reply-To: <20140302183855.GA5308@hp-netbook.local> References: <20140302172759.GA4728@hp-netbook.local> <CAFG2KC%2BU7Q4U5nLgxJptZgj5VmdSNpUmEm7Q3nQjZNiMejDozg@mail.gmail.com> <20140302174314.GA4932@hp-netbook.local> <CAFG2KCJpAkXVWsNFYs=oL-9oNz68Da0X=3jg31QrFhMAUkBL5w@mail.gmail.com> <20140302183855.GA5308@hp-netbook.local>
next in thread | previous in thread | raw e-mail | index | archive | help
Elias, If the use of SHA-2 hashes don't provide enough assurance that the ISO images are authentic can you explain the crypto technology that you are looking for? Digitally signatures would enable one to verify that the published hashes are indeed from a trusted source - Is that what you are seeking? On Sun, Mar 2, 2014 at 8:38 AM, Elias Diem <lists@webconect.ch> wrote: > On 2014-03-02, Anton Sayetsky wrote: > > > Partly. > > > > http://en.wikipedia.org/wiki/SHA-2 > > > SHA-2 is a set of cryptographic hash functions (SHA-224, SHA-256, > SHA-384, SHA-512, SHA-512/224, SHA-512/256) designed by the U.S. National > Security Agency (NSA) and published in 2001 by the NIST as a U.S. Federal > Information Processing Standard (FIPS). > > Ah well, I was looking for a signature (like PGP or > something). > > I therefore assume that there are no crypto signatures, > "only" checksums. > > > I forgot to say that checksums are also present in all release > announcements. > > That might help a bit. > > -- > Greetings > Elias > > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CACArijBNZL=OPwa1_0CTkF6uaEt8N=oU_X4B8RdDw87UcBhcVA>