Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security issue with snapshot integrity verification #3729

Open
wants to merge 1 commit into
base: release/v1.6
Choose a base branch
from
Open

Security issue with snapshot integrity verification #3729

wants to merge 1 commit into from

Commits on Oct 26, 2024

  1. etcd: switch from md5sum to sha256sum for snapshot checksums 

    Changes checksum calculation in GetEtcdSnapshotChecksum from md5sum to
sha256sum to provide stronger cryptographic verification of etcd snapshots.
SHA-256 is cryptographically more secure and resistant to collision attacks
compared to MD5.

Note: This changes the checksum length from 32 to 64 characters. The command
execution and output parsing remain unchanged as both commands use the same
output format.

Technical details:
- Changed command from md5sum to sha256sum in shell execution
- Output format remains "<hash>  <filename>"
- Post-processing with cut and tr commands unaffected
    @guilherme-dsantos
    guilherme-dsantos committed Oct 26, 2024
    Configuration menu
    Copy the full SHA
    3d05359 View commit details
    Browse the repository at this point in the history