Use stronger hash algorithms for released package files
- Dominant language
- No language data
- Stars
- 2.3k
- Forks
- 310
- PR merge metrics
- No merged PRs in 30d
Description
#### Description
On both [the official download page](https://developer.android.com/ndk/downloads/index.html) and [the wiki](https://github.com/android-ndk/ndk/wiki), SHA1 checksums are listed. Please consider move to stronger hash algorithms such as SHA2 or SHA3, thanks.
#### Environment Details
* NDK Version: 17.0.4698735-beta2
* Build sytem: N/A
* Host OS: All
* Compiler: N/A
* ABI: N/A
* STL: N/A
* NDK API level: N/A
* Device API level: N/A
Contributor guide
Research direction
Start by reviewing the checksum listings on the official download page and the project wiki, then trace how released package hashes are generated and published. Done means the SHA1 listings are replaced or supplemented with a stronger SHA2 or SHA3 algorithm consistently in both locations.
Written by the indexing model from the issue text.
Assessment
- Domain
- cryptography, documentation, release, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100