Am 11.09.2014 um 16:43 schrieb Osamu Aoki: > Hi, > > On Mon, Sep 08, 2014 at 04:10:46PM +0200, Jonas Meurer wrote: >> Am 2014-08-28 21:23, schrieb Frank Lin PIAT: >>> Quoting cryptsetup's NEWS file: >>> >>> I must tell that I don't know if whirlpool is the default crypo or not. >> >> Whirlpool is not the default cryptographic hash function used, and has never >> been. Nevertheless it's a good idea to add a short hint regarding the >> whirlpool bug to release notes. > > If whirlpool was not the one used by d-i and if we are going to mention > it in release note, we should mention "Use of whirlpool is unusual setup > only generated by the manual user action". Otherwise, the documentation > causes unnecessary worry to many.
Agreed. Though I'm not sure whether the change should be mentioned in release notes at all. My impression is that few people use whirlpool with cryptsetup. And for users skilled enough chose a different hash function the warning in NEWS.Debian might be enough, no? I have to admit that I don't know much about the scope of Debian release notes, so I don't want to argue over whether the cryptsetup whirlpool issues should be mentioned there ;) Kind regards, jonas -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
