Chirongwa cheFedora chatsanangura chirongwa chekudzima tsigiro yemasiginecha edhijitari zvichibva paSHA-1 algorithm muFedora Linux 39. Kuremara kunosanganisira kupedza kuvimba nemasiginicha anoshandisa SHA-1 hashes (SHA-224 ichaziviswa seshoma inotsigirwa mudhijitari. masiginicha), asi kuchengetedza rutsigiro rweHMAC neSHA-1 uye nekupa kugona kugonesa iyo LEGACY mbiri neSHA-1. Mushure mekushandisa shanduko, raibhurari yeOpenSSL inozotanga kuvharira chizvarwa uye kusimbiswa kwemasaini neSHA-1.
Kuremara kwacho kwakarongwa kuti kuitwe mumatanho akati wandei: MuFedora Linux 36, SHA-1-yakavakirwa masiginecha anozobviswa mumutemo we "FUTURE", mutemo webvunzo TEST-FEDORA39 unopihwa kudzima SHA-1 pakukumbira kwe mushandisi (update-crypto-policies -set TEST-FEDORA39), paunenge uchigadzira uye uchisimbisa masiginecha anobva paSHA-1, yambiro icharatidzwa mugiyo. Munguva ye pre-beta kuburitswa kweFedora Linux 38, iyo rawhide repository ichange iine mutemo unorambidza kushandiswa kweSHA-1-based siginecha, asi shanduko iyi haizoshandiswe mubeta nekuburitswa kweFedora Linux 38. Nekuburitswa kweFedora Linux 39, iyo deprecation policy yeSHA-1-based siginicha ichaiswa nekusarudzika.
Chirongwa chakarongwa hachisati chaongororwa neFESCo (Fedora Engineering Steering Committee), iyo inotarisira chikamu chehunyanzvi chekusimudzira kugovera kweFedora. Kupera kwerutsigiro rweSHA-1-yakavakirwa masiginecha imhaka yekuwedzera kugona kwekurovera kurwiswa neakapihwa prefix (mutengo wekusarudza kudhumhana unofungidzirwa kune akati wandei makumi ezviuru zvemadhora). Mabhurawuza ane zvitupa zvakasainwa achishandisa iyo SHA-1 algorithm seisina kuchengeteka kubva pakati pa2016.
Source: opennet.ru