[Python-ideas] Using sha512 instead of md5 on python.org/downloads

[Ronald Oussoren]

> On 8 Dec 2018, at 05:14, Steven D'Aprano <steve at pearwood.info> wrote:
> 
> On Sat, Dec 08, 2018 at 11:05:43AM +0900, INADA Naoki wrote:
> 
>> We already use SHA256 on PyPI.
>> Many project in the world moving from md5 to SHA256.
> [...]
> 
> 
> How easy is it to use sha256 on the major platforms, compared to md5?
> 
> On Linux, it is just as easy:
> 
> [steve at ando ~]$ md5sum x.py
> 7008dcaa07fd35917474835425c6151a  x.py
> [steve at ando ~]$ sha256sum x.py
> 6730dbf2b5ea5c874e789a39532b0e544af18fbea3c680880b01c81b773eabe2  x.py
> 
> but how about Windows and Mac users? Do those platforms provide a sha256 
> checksum utility?
> 
> (Maybe we should provide both hashes.)

macOS has a shasum tool that does the same thing:

$ shasum -a 256 __init__.py 
8db2fe0b21deec50d134895a6d5cfbb5300b23922bf2d9bb5b4b63ac40c6a22e  __init__.py

There’s also python itself that can be used to calculate the checksum :-)

Ronald

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/python-ideas/attachments/20181209/79821744/attachment-0001.html>