Conner, Eric wrote:

Does anyone have a sha256 for batmand-adv-kernelland-0.2.tar.gz?

What do you mean by "have"? I can calculate it quite easily[1] and Debian includes it for example in .changes and .dsc files[2] (just renamed to batman- adv-kernelland_0.2.orig.tar.gz).

Or do you want to say that Simon should change his gnupg key and config to generate sha2 checksums[3] even if he uses dsa[6], because sha1[4] and md5[5] becoming more and more attack-able?

Best regards, Sven

[1] http://www.gnu.org/software/coreutils/manual/html_node/sha2-utilities.html [2] http://lists.debian.org/debian-devel-changes/2009/11/msg00786.html [3] http://www.debian-administration.org/users/dkg/weblog/48 [4] http://eurocrypt2009rump.cr.yp.to/837a0a8086fa6ca714249409ddfae43d.pdf [5] http://www.schneier.com/blog/archives/2008/12/forging_ssl_cer.html [6] http://lists.gnupg.org/pipermail/gnupg-devel/2009-May/025080.html