On Thu, Mar 27, 2014 at 1:48 AM, Toshio Kuratomi <a.badger(a)gmail.com> wrote:
If there was a library that made just sha1 (or even just hashes)
we might consider it -- I know when we've discussed md5 before we've
lamented the fact that there's no libmd5 that was lightweight, had a simple
API, and in Fedora, that we could tell people to look into using instead.
But due to the lack of such a library we've never had to set precedent on
whether to force maintainers to do that port instead of bundling.
gnulib provides sha1.c/des.c/md5.c and so on.
My opinion is that we should encourage using such files from gnulib at
least and state Provides: bundeld(gnulib) only instead of providing
more and more Provides: bundled([cryptotype]-[authors])