Re:FreedomBox Version 0.1 Released
by kingnight on Wednesday February 27, 2013 @04:32PM
(#5295093)
What is the benefit of a sha512sum over a smaller md5 checksum for confirming validity of a file/package?
[ Parent
| on HN ]
It is 'easy' to generate hash collisions for md5: http://www.win.tue.nl/hashclash/
I don't think this means one can create documents with a given md5 hash, but if you're concerned about people making software that impersonates your release, you definitely should start worrying about someone producing a compromised 'copy' of your software with the same md5 hash.