perl-Starch-Plugin-SecureStateID-0.001-alt1.noarch.rpm


Advertisement

Description

perl-Starch-Plugin-SecureStateID - use cryptographically secure random when making state IDs

Distribution: ALT Linux Sisyphus
Repository: Autoimports noarch
Package name: perl-Starch-Plugin-SecureStateID
Package version: 0.001
Package release: alt1
Package architecture: noarch
Package type: rpm
Installed size: 21.43 KB
Download size: 21.43 KB
Official Mirror: ftp.altlinux.org
For each state stored in Starch, the generated ID is virtually guaranteed to be unique. It is not generated to be unguessable. By using this plugin, the state will include a random number generated using the Math::Random::Secure manpage to assure that is both unique and includes a cryptographically secure random number in the calculated ID. This plugin also upgrades the state ID so that it is calculated using SHA-256 instead of SHA-1. SHA-1 hashed values are potentially guessable for attackers with a large enough budget. A possible downside is that SHA-256 creates a key that is 256 bits long, which results in an ID string that is 64 bytes long, rather than the 40 byte long string provided by SHA-1. The version of SHA used may be chosen with the the secure_state_id_sha entry elsewhere in this document option.

Alternatives

Provides

  • perl(Starch/Plugin/SecureStateID.pm) = 0.001
  • perl-Starch-Plugin-SecureStateID = 0.001-alt1

    Install Howto

    1. Add the following line to /etc/apt/sources.list:
      rpm [Sisyphus] http://ftp.altlinux.org/pub/distributions/ALTLinux/autoimports/Sisyphus noarch autoimports
      rpm [Sisyphus] http://ftp.altlinux.org/pub/distributions/ALTLinux/autoimports/Sisyphus noarch autoimports
      
    2. Update the package index:
      # sudo apt-get update
    3. Install perl-Starch-Plugin-SecureStateID rpm package:
      # sudo apt-get install perl-Starch-Plugin-SecureStateID

    Files

    • /usr/share/doc/perl-Starch-Plugin-SecureStateID-0.001/Changes
    • /usr/share/doc/perl-Starch-Plugin-SecureStateID-0.001/LICENSE
    • /usr/share/doc/perl-Starch-Plugin-SecureStateID-0.001/README
    • /usr/share/perl5/Starch/
    • /usr/share/perl5/Starch/Plugin/SecureStateID.pm
    Advertisement
    Advertisement