Skip Menu |

This queue is for tickets about the Digest-SHA CPAN distribution.

Report information
The Basics
Id: 58997
Status: rejected
Priority: 0/
Queue: Digest-SHA

People
Owner: Nobody in particular
Requestors: chris [...] bingosnet.co.uk
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: (no value)
Fixed in: (no value)



Subject: correct URL for SHA1 NIST test vectors
Date: Wed, 30 Jun 2010 22:54:29 +0100
To: bug-Digest-SHA [...] rt.cpan.org
From: "Chris 'BinGOs' Williams" <chris [...] bingosnet.co.uk>
----- Forwarded message from douglas white <douglas.white@nist.gov> ----- From: douglas white <douglas.white@nist.gov> Date: Wed, 30 Jun 2010 08:01:35 -0400 Subject: correct URL for SHA1 NIST test vectors Mr. Brocard and Mr. Williams, I noticed in the posting [perl.git] branch blead, updated. v5.13.2-53-gdfe1edc online at http://www.nntp.perl.org/group/perl.perl5.changes/2010/06/msg26753.html that the URL for NIST test vectors for hashes was updated to http://www.nsrl.nist.gov/testdata/ . As the NSRL is not a project in the NIST Computer Security Division, the URL should be http://csrc.nist.gov/groups/STM/cavp/#03 I apologize for any confusion. Thank you, Doug Douglas White National Institute of Standards and Technology NIST, 100 Bureau Drive Stop 8970, Gaithersburg, MD 20899-8970 National Software Reference Library - http://www.nsrl.nist.gov Voice: 301-975-4761 Fax: 301-975-6097 Email: douglas.white@nist.gov My opinions aren't necessarily my employer's nor any other organization's. Show quoted text
----- End forwarded message ----- Hi, Attached is an email I received following the recent update of Digest-SHA in blead. Many thanks, -- Chris Williams aka BinGOs PGP ID 0x4658671F http://www.gumbynet.org.uk ==========================
Download (untitled)
application/pgp-signature 189b

Message body not shown because it is not plain text.

Both URLs work, and both are equally convenient for obtaining the test data. The fact that the National Software Reference Library (NSRL) is "not a project in the NIST Computer Security Division" doesn't seem particularly relevant to whether one URL is more bona fide than the other. On the basis of name alone, however, I deem it preferable to point to NIST's National Software Reference Library as the official source. Note in the OP's signature block that he doesn't speak officially for NIST. So, until such time as NIST comes forward with a reason why the NSRL source is no longer valid, the URL should remain as is. Regards, Mark