[FFmpeg-devel] [PATCH] add md5 muxer

Uoti Urpala uoti.urpala
Sun Sep 27 20:13:27 CEST 2009


On Sun, 2009-09-27 at 19:53 +0200, Reimar D?ffinger wrote:
> On Sun, Sep 27, 2009 at 07:31:00PM +0200, Michael Niedermayer wrote:
> > why md5 instead of sha1?

> 2) a md5/md5sum binary is available anywhere, I do not know
>    something comparable for sha

sha1sum, part of gnu coreutils (along with various sizes of sha2 hashes)
and quite standard.

> 3) for security-relevant stuff they are all "useless"

AFAIK practical SHA1 security is still way above MD5.


> Which leaves me to ask: why sha1? I don't really see anything in
> its favour (though supporting both, is trivial, the only question
> would be how, I do not like any of the methods proposed so far).

SHA1 is the more standard algorithm. Although SHA1 may not be
recommendable for new security-relevant systems it's not yet clear
exactly what will be the next "basic" hash. Why would anyone still use
MD5 for anything? Only because of outdated systems that only have MD5
utilities several years after MD5 has become obsolete?




More information about the ffmpeg-devel mailing list