Re: [PATCH] module: Do not offer sha224 for built-in module signing

On Tue, Oct 10, 2023 at 10:26:33PM +0100, Dimitri John Ledkov wrote:

sha224 does not provide enough security against collision attacks
relative to the default keys used for signing (RSA 4k & P-384). Also
sha224 never became popular, as sha256 got widely adopter ahead of
sha224 being introduced.

Signed-off-by: Dimitri John Ledkov <redacted>
---
 kernel/module/Kconfig | 5 -----
 1 file changed, 5 deletions(-)

Patch applied.  Thanks.
-- 
Email: Herbert Xu [off-list ref]
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt