[pacman-dev] GPG work

[Thomas Bächler]

Aaron Griffin schrieb:
> Forcing md5sum collisions requires arbitrary null padding. tar can (I
> think) support this, but not if it's compressed. You can't arbitrarily
> put nulls in the middle of a gzip'd stream...

You can put arbitrary data at the end of a gzip archive. This has been 
used here: 
http://web.archive.org/web/20011212144451/fatphil.org/maths/illegal1.html

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
URL: <http://archlinux.org/pipermail/pacman-dev/attachments/20081213/ed3c8cb6/attachment.pgp>