|
|
1.1 root 1: This utility computes MD5 checksums of files, ignoring end-of-line 1.1.1.2 ! root 2: conventions unless the -b (binary) flag is set. The file "pgp23.md5" 1.1 root 3: contains the signatures of all the files in the source. If you are 1.1.1.2 ! root 4: in the source directory and run "md5sum -c pgp23.md5", you will get 1.1 root 5: an error message if any files fail to match. If all files match, 6: nothing will be printed. 7: 8: You need to borrow some files from the PGP sources to compile this 9: utility (md5.c, md5.h, and possibly the getopt implementation); 10: see the md5sum.c file for details. 11: 1.1.1.2 ! root 12: The file pgp23.md5 is signed by one of the developers, so you can be 1.1 root 13: reasonably sure it's correct. It would be possible for a hard-working 14: miscreant to fiddle with the distribution so all of this mutual checking 15: would not show any errors, but it's not going to happen accidentally. 16: And if you have a previous version of PGP that you trust, it's not going 17: to happen at all. 18: 19: The only other thing that's needed is a detached PGP signature of the 1.1.1.2 ! root 20: files md5sum.c, md5.c and md5.h, and anyone with a previous trusted ! 21: version of PGP can be sure that no tampering has occurred anywhere, and ! 22: that's here: 1.1 root 23: 1.1.1.2 ! root 24: md5sum.c: 1.1 root 25: -----BEGIN PGP MESSAGE----- 1.1.1.2 ! root 26: Version: 2.3 1.1 root 27: 1.1.1.2 ! root 28: iQBgAgUBLB2GKco9of2GWqfzAQEHNwJXcWywhAoq8hBOxRnk6IDU7FoltmeInXDS ! 29: kkO7qpM8yL34MChuXRn9P97FItJeWUatRPDIGSzO6Gqw+CA5jiRfI6Sj9zMBU1ef ! 30: VHR2 ! 31: =5EcU ! 32: -----END PGP MESSAGE----- ! 33: md5.c: ! 34: -----BEGIN PGP MESSAGE----- ! 35: Version: 2.3 ! 36: ! 37: iQBgAgUBLB2Ghso9of2GWqfzAQH0rQJVFoCqfOtnLe1hIKb21wIiX4VqPJbHg2B+ ! 38: p5AXczVVMoO7NyYaCuFEQfGeET+GMq3yqp4jH6/mQ8fglXHkPDwpR7D8/f2Opl2g ! 39: MLRg ! 40: =TVF4 ! 41: -----END PGP MESSAGE----- ! 42: md5.h: ! 43: -----BEGIN PGP MESSAGE----- ! 44: Version: 2.3 ! 45: ! 46: iQBgAgUBLB2Gnco9of2GWqfzAQGORQJXSH/dr7rvLw2mtwZx/+8gzPjVVmTLapek ! 47: 2hWo4LOu1/oBFYZN/C/ZQogr7XTk6vJiL4GqrDNWzzi+q1au3dUMO4FP/eFD/fke ! 48: AB30 ! 49: =+Hn6 1.1 root 50: -----END PGP MESSAGE----- 51: 52: (And my and Branko's keys are in the supplied key ring, signed by 53: Philip Zimmermann, so you know that we are who we say we are, and if 54: there are any trojan horses in the source, you know who put them there. 55: Isn't security fun?) 56: -- 57: -Colin <[email protected]>
This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.