perl-Starch-Plugin-SecureStateID - use cryptographically secure random when making state IDs

Distribution: ALT Linux Sisyphus
Repository: Autoimports noarch
Package name: perl-Starch-Plugin-SecureStateID
Package version: 0.001
Package release: alt1
Package architecture: noarch
Package type: rpm
Installed size: 21.43 KB
Download size: 21.43 KB
Official Mirror:
For each state stored in Starch, the generated ID is virtually guaranteed to be unique. It is not generated to be unguessable. By using this plugin, the state will include a random number generated using the Math::Random::Secure manpage to assure that is both unique and includes a cryptographically secure random number in the calculated ID. This plugin also upgrades the state ID so that it is calculated using SHA-256 instead of SHA-1. SHA-1 hashed values are potentially guessable for attackers with a large enough budget. A possible downside is that SHA-256 creates a key that is 256 bits long, which results in an ID string that is 64 bytes long, rather than the 40 byte long string provided by SHA-1. The version of SHA used may be chosen with the the secure_state_id_sha entry elsewhere in this document option.



  • perl(Starch/Plugin/ = 0.001
  • perl-Starch-Plugin-SecureStateID = 0.001-alt1

    Install Howto

    1. Add the following line to /etc/apt/sources.list:
      rpm [Sisyphus] noarch autoimports
      rpm [Sisyphus] noarch autoimports
    2. Update the package index:
      # sudo apt-get update
    3. Install perl-Starch-Plugin-SecureStateID rpm package:
      # sudo apt-get install perl-Starch-Plugin-SecureStateID


    • /usr/share/doc/perl-Starch-Plugin-SecureStateID-0.001/Changes
    • /usr/share/doc/perl-Starch-Plugin-SecureStateID-0.001/LICENSE
    • /usr/share/doc/perl-Starch-Plugin-SecureStateID-0.001/README
    • /usr/share/perl5/Starch/
    • /usr/share/perl5/Starch/Plugin/