[pacman-dev] GPG work

Thomas Bächler thomas at archlinux.org
Sat Dec 13 10:45:29 EST 2008

Aaron Griffin schrieb:
> Forcing md5sum collisions requires arbitrary null padding. tar can (I
> think) support this, but not if it's compressed. You can't arbitrarily
> put nulls in the middle of a gzip'd stream...

You can put arbitrary data at the end of a gzip archive. This has been 
used here: 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
URL: <http://archlinux.org/pipermail/pacman-dev/attachments/20081213/ed3c8cb6/attachment.pgp>

More information about the pacman-dev mailing list