On Thu, Nov 21, 2013 at 10:29:39AM +0100, Tomas Mraz wrote:
On St, 2013-11-20 at 20:33 +0000, Richard W.M. Jones wrote:
> See:
>
https://github.com/ocaml/ocaml/blob/trunk/byterun/md5.c#L78
>
> (1) In terms of the bundled(md5-$IMPLEMENTATION), which
> $IMPLEMENTATION is this?
It is bundled(md5-plumb)
> (2) Ideally I would like to replace this with a call to a library (in
> Fedora, I don't think this would be accepted upstream). But which
> library should I use?
I'd probably use libgcrypt. However if the MD5 is not used for security
related purpose, which it should not be used for due to its brokenness
anyway, I am not sure it is worth it to replace the bundled copy with a
library call.
FWIW it is used to implement an OCaml library module (Digest) which is
used by the compiler for making a unique hash over module interfaces
so we can tell if they are compatible / have changed. It's not used
for any security-related purpose.
Rich.
--
Richard Jones, Virtualization Group, Red Hat
http://people.redhat.com/~rjones
virt-top is 'top' for virtual machines. Tiny program with many
powerful monitoring features, net stats, disk stats, logging, etc.
http://people.redhat.com/~rjones/virt-top