Re: [PATCH] module: Do not offer sha224 for built-in module signing

2023-10-19 Thread Herbert Xu
On Tue, Oct 10, 2023 at 10:26:33PM +0100, Dimitri John Ledkov wrote: > sha224 does not provide enough security against collision attacks > relative to the default keys used for signing (RSA 4k & P-384). Also > sha224 never became popular, as sha256 got widely adopter ahead of > sha224 being introdu

[PATCH] module: Do not offer sha224 for built-in module signing

2023-10-10 Thread Dimitri John Ledkov
sha224 does not provide enough security against collision attacks relative to the default keys used for signing (RSA 4k & P-384). Also sha224 never became popular, as sha256 got widely adopter ahead of sha224 being introduced. Signed-off-by: Dimitri John Ledkov --- kernel/module/Kconfig | 5