News for hackers. Stuff that matters.

A comment on Git 3.0's upcoming SHA-256 default will be a costly mistake. Parent comment

Re:Git 3.0's upcoming SHA-256 default will be a costly mistake by 7bit on Friday October 02, 2026 @10:20AM (#49933841)
Sorry, no. For trusting code there is code signing. A sha-1 hash is cryptographically the wrong approach for it or we wouldn't have RSA and ECDSA algos.
[ Parent | on HN ]
Re:Git 3.0's upcoming SHA-256 default will be a costly mistake by zygentoma on Friday October 02, 2026 @10:50AM (#49934158)
And what do these cryptographic signing algorithms do? They sign a cryptographic hash of the data … Which the SHA-family of hashes are.
[ Parent | on HN ]