Bundled md5 in OCaml

[Richard W.M. Jones]

On Thu, Nov 21, 2013 at 10:29:39AM +0100, Tomas Mraz wrote:
> On St, 2013-11-20 at 20:33 +0000, Richard W.M. Jones wrote:
> > See:
> > https://github.com/ocaml/ocaml/blob/trunk/byterun/md5.c#L78
> > 
> > (1) In terms of the bundled(md5-$IMPLEMENTATION), which
> > $IMPLEMENTATION is this?
> 
> It is bundled(md5-plumb)
> 
> > (2) Ideally I would like to replace this with a call to a library (in
> > Fedora, I don't think this would be accepted upstream).  But which
> > library should I use?
> 
> I'd probably use libgcrypt. However if the MD5 is not used for security
> related purpose, which it should not be used for due to its brokenness
> anyway, I am not sure it is worth it to replace the bundled copy with a
> library call.

FWIW it is used to implement an OCaml library module (Digest) which is
used by the compiler for making a unique hash over module interfaces
so we can tell if they are compatible / have changed.  It's not used
for any security-related purpose.

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
virt-top is 'top' for virtual machines.  Tiny program with many
powerful monitoring features, net stats, disk stats, logging, etc.
http://people.redhat.com/~rjones/virt-top