Improving availability and guaranteeing integrity in ISO - internal sha1sums

[Jesse Keating]

On Sunday 10 June 2007 00:31:51 David Timms wrote:
> I am not sure how you do that - how can you include inside a piece of
> data a checksum that uses the data {including itself} to calculate the
> checksum ? {sounds like one for the crytologists}. Perhaps it is outside
> the data area, but then you have no way to know if the implanted
> checksum is broken or that data itself {although I imagine it is likely
> to be the data}.
>
> What I am after is a checksum for each file present within the iso, not
> the result for the whole iso. Is there such a thing already present ?

Check out /usr/lib/anaconda-runtime/implantisomd5 for what it does.  I'm not 
actually sure how / what it calculates, would be worth a read.

-- 
Jesse Keating
Release Engineer: Fedora
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-devel-list/attachments/20070610/967be931/attachment.sig>