summaryrefslogtreecommitdiff
path: root/usr.bin/cksum
diff options
context:
space:
mode:
authorbitblt <bitblt@cvs.openbsd.org>1997-01-27 20:14:22 +0000
committerbitblt <bitblt@cvs.openbsd.org>1997-01-27 20:14:22 +0000
commit487b3e927ace5b154e5bf007759bb82afc1e0463 (patch)
tree02d804f326555515e6a2c012ee050cba9627c1f6 /usr.bin/cksum
parentc2e48c6ab780ffb6830cdf0d0236ac6b17ee125b (diff)
Added a WARNING about not using it to detect back doors.
Diffstat (limited to 'usr.bin/cksum')
-rw-r--r--usr.bin/cksum/cksum.110
1 files changed, 9 insertions, 1 deletions
diff --git a/usr.bin/cksum/cksum.1 b/usr.bin/cksum/cksum.1
index 1a1dbed2006..630599da16f 100644
--- a/usr.bin/cksum/cksum.1
+++ b/usr.bin/cksum/cksum.1
@@ -1,4 +1,4 @@
-.\" $OpenBSD: cksum.1,v 1.2 1996/06/26 05:32:01 deraadt Exp $
+.\" $OpenBSD: cksum.1,v 1.3 1997/01/27 20:14:21 bitblt Exp $
.\" $NetBSD: cksum.1,v 1.8 1995/09/02 05:45:15 jtc Exp $
.\"
.\" Copyright (c) 1991, 1993
@@ -157,6 +157,14 @@ The
and
.Nm sum
utilities exit 0 on success, and >0 if an error occurs.
+.Sh WARNING
+Do not use
+.Nm sum
+or
+.Nm cksum
+to detect hostile binary modifications. An attacker
+can trivially produce backdoored daemons which have the same CRC as the
+standard versions. Use a cryptographic checksum, such as MD5 instead.
.Sh SEE ALSO
The default calculation is identical to that given in pseudo-code
in the following