[Distutils] Proposal: drop md5 for sha256

[PJ Eby]

On Wed, Jul 4, 2012 at 5:07 AM, Tarek Ziadé <tarek at ziade.org> wrote:

> On 7/4/12 9:47 AM, Tarek Ziadé wrote:
>
>  Oh let's do a fletcher checksum ! This one should be universally
>> authorized by any system
>>
>>  Better version:
>
> http://tarek.pastebin.mozilla.**org/1690480<http://tarek.pastebin.mozilla.org/1690480>
>
> takes 4 seconds on my MBA for a 40 mb file, so it seems fast enough since
> our PyPI limit is 8 Mb.


It's too bad Python's built-in hash() isn't guaranteed consistent across
versions and implementations, otherwise we could just use that!  (Or more
precisely, a spec for how to combine the Python hashes of specified-size
blocks.)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/distutils-sig/attachments/20120704/dd244da5/attachment.html>