Re: signing a filesystem

Andrew E. Mileski (aem@ott.hookup.net)
Sat, 28 Dec 1996 01:07:13 -0500 (EST)


> > new-footprint = old-footprint ^ md5(old-block) ^ md5(new-block)
>
> This part is all good.

I humbly suggest using the more advanced RIPEMD-160, which has been
made public. It is tougher to fool, and produces a longer byte stream.
Slower than MD5 of course (my P5-166 does RIPEMD-160 at about
2 million bytes/sec).

For code, see ftp://ftp.mv.com/pub/ddj/1997/1997.01/rmd160.zip

--
Andrew E. Mileski   mailto:aem@ott.hookup.net
Linux Plug-and-Play Kernel Project http://www.redhat.com/linux-info/pnp/
XFree86 Matrox Team http://www.bf.rmit.edu.au/~ajv/xf86-matrox.html