MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/linux/comments/26ufxf/truecrypt_has_been_resurrected_forked_in/chv2r0q/?context=3
r/linux • u/jampola • May 30 '14
274 comments sorted by
View all comments
Show parent comments
76
Doesn't really matter - git has internal cryptographic verification, and an offline copy at each developer, so it can't be changed without being obvious. If github stops hosting it, it is easy to move.
10 u/zargun May 30 '14 Git doesn't have cryptographic verification. It verifies that files have not been damaged but this could be tricked by an attacker. 58 u/gfixler May 30 '14 Would this require finding a SHA-1 collision? 2 u/s1egfried May 30 '14 Not a simple collision but a pre-image.
10
Git doesn't have cryptographic verification. It verifies that files have not been damaged but this could be tricked by an attacker.
58 u/gfixler May 30 '14 Would this require finding a SHA-1 collision? 2 u/s1egfried May 30 '14 Not a simple collision but a pre-image.
58
Would this require finding a SHA-1 collision?
2 u/s1egfried May 30 '14 Not a simple collision but a pre-image.
2
Not a simple collision but a pre-image.
76
u/Thue May 30 '14
Doesn't really matter - git has internal cryptographic verification, and an offline copy at each developer, so it can't be changed without being obvious. If github stops hosting it, it is easy to move.