[k3b] [Bug 360184] k3b should offer option to select either md5 sum or sha256 when loading dvd iso

[Thomas Schmitt]

https://bugs.kde.org/show_bug.cgi?id=360184

--- Comment #7 from Thomas Schmitt <scdbackup at gmx.net> ---
Hi,

guyvf wrote:
> https://en.wikipedia.org/wiki/Hash_function_security_summary

This is about intentional manipulations of checksums, not about their
suitability for detecting incidential transport or storage errors.

So the main purposes of hashes with ISO images or their content is not
in danger.
MD5 still is much more safe than loitering a day at an arbitrary spot on
earth without being prepared for the direct hit of a 10 km asteroid
during that day. (That's around 2 exp -64 of probability.)

If really crypto-grade checksumming is desired, i'd propose to use some
trustworthy program (if you find any) to harden the ISO image after
production. You cannot expect the necessary crypto experience with the
programmers of ISO 9660 programs.


Have a nice day :)

Thomas

-- 
You are receiving this mail because:
You are the assignee for the bug.