Re: Adding SHA-512 to the list of digests

[Tobias Nygren <tnn%NetBSD.org@localhost>]

On Thu, 8 Oct 2015 11:21:55 -0700
Alistair Crooks <agc%pkgsrc.org@localhost> wrote:

> -_DIGEST_ALGORITHMS?=   SHA1 RMD160
> +_DIGEST_ALGORITHMS?=   SHA1 RMD160 SHA512
>  _PATCH_DIGEST_ALGORITHMS?=     SHA1

I'm not up to date on the crypto stuff, but do we gain anything
significant in terms of security by keeping SHA1 in the list? Replacing
a digest algorithm is "almost free", but adding one has a nonzero
performance penalty.

Kind regards,
-Tobias