Hi list! As far as I have gathered, the SHA-1-sum is used as a identifier for commit= s,=20 and that is the primary reason for using sha1. However, several places=20 (including the google tech-talk featuring Linus himself) states that the id= 's=20 are cryptographically secure. As discussed in [1], SHA-1 is not as secure as it once was (and this was in= =20 2005), and I'm wondering - are there any plans for migrating to another=20 hash-algorithm? I.e. SHA-2, whirlpool.. [1] http://www.schneier.com/blog/archives/2005/02/cryptanalysis_o.html =2D-=20 mvh Henrik Austad
