From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id QP8BFwTa02FjzwAAgWs5BA (envelope-from ) for ; Tue, 04 Jan 2022 06:24:20 +0100 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id gAoCDwTa02EjMgEAG6o9tA (envelope-from ) for ; Tue, 04 Jan 2022 06:24:20 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 8BE771B92F for ; Tue, 4 Jan 2022 06:24:19 +0100 (CET) Received: from localhost ([::1]:46964 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1n4cJ0-0002S7-Mb for larch@yhetil.org; Tue, 04 Jan 2022 00:24:18 -0500 Received: from eggs.gnu.org ([209.51.188.92]:50220) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1n4cII-0002Rz-5Z for guix-devel@gnu.org; Tue, 04 Jan 2022 00:23:34 -0500 Received: from [2a00:1450:4864:20::343] (port=36458 helo=mail-wm1-x343.google.com) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1n4cIG-00055s-B9 for guix-devel@gnu.org; Tue, 04 Jan 2022 00:23:33 -0500 Received: by mail-wm1-x343.google.com with SMTP id n10-20020a7bc5ca000000b00345c520d38eso19296970wmk.1 for ; Mon, 03 Jan 2022 21:23:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=message-id:subject:from:to:date:in-reply-to:references:user-agent :mime-version:content-transfer-encoding; bh=a4T6KDooj/cO5J/OOnkAyuXRS+RC4hXTHEiWBkrBHSY=; b=X+e4dZdwTCuIMuSKepUyyjO+36T6eoXs+W2kxIaB9GS14t9/9XocoURGqRGIBQJ1dj KdLmmtSDh+MaLAjgN4PaH3K+YlnDLit24Yad4dwheYxx0evsGbpoWzifX8k/fFeuW0+C F3cl7VDb4SLxxJTin7M+Tbc8IYKqSfJr3DrFBeurZOJJ+mgslxEYdevLTP94YtBH9spY 5QEddof/VsiKkqi3fHpq7J4PpaXU+RtPNug9mOpQK/dWxLjJy6B8qFgNoRcb8XnrEmaX fhtRLaJMcxiwAds31HLPKh7fqSTdG4nWs+btloT+yU9Yd99oKgFJ/6RJVOq1Bdqiu9+X 4r0Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:message-id:subject:from:to:date:in-reply-to :references:user-agent:mime-version:content-transfer-encoding; bh=a4T6KDooj/cO5J/OOnkAyuXRS+RC4hXTHEiWBkrBHSY=; b=LYdP4om9mS13L47PT4oHEpKotYbpbW0P0h5ry/U/tCKxGOB8VlmQrVN+DoZx19EbiZ /AiRnldtRXGYX4d5WH1PYuzvoPkKFt82mo6NKw1OCvgy+gatznBdKnf8CBod5ZRTrRxF IgdRY99Yu52RXUJoZL5BnzubVjzbvCWsoMe3cnQDfHsMtVtyclv+51wZBT/btMvS4VHF ocX75+LRSUIi7BoCNOCZbGICRK7uGVNj+BBZBVxbW6iJCU2BbdiJkCDgAYCKM0K3CSFN MCUywpVamQOMUw++5EUwvEXabZxlML//MCsj5XVoFz7C9V9W8R3qLguV5ZkX+RCaLC2h /fIw== X-Gm-Message-State: AOAM530qzoZRWipLqb5JxzgSdnW7hZ5VFhp4oRvV7WuavL2GC692TDL0 0QcSuwiCY9tNyudGC3U9lxs= X-Google-Smtp-Source: ABdhPJxddALhxbHAfYC0+JTjrRZvPXdGZHtZ3Hlq7I/cV5TVd2ecNCiLsEDrEqiCk1D7cGlowUo2Mg== X-Received: by 2002:a05:600c:2242:: with SMTP id a2mr40368985wmm.63.1641273809185; Mon, 03 Jan 2022 21:23:29 -0800 (PST) Received: from nijino.fritz.box ([85.127.52.93]) by smtp.gmail.com with ESMTPSA id a24sm20274009wmj.8.2022.01.03.21.23.27 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 03 Jan 2022 21:23:28 -0800 (PST) Message-ID: <03096402e357e9b82084cda5f2822e1e8bf3d051.camel@gmail.com> Subject: Re: On raw strings in commit field From: Liliana Marie Prikler To: zimoun , Mark H Weaver , guix-devel@gnu.org Date: Tue, 04 Jan 2022 06:23:23 +0100 In-Reply-To: <864k6ke87e.fsf@gmail.com> References: <6e451a878b749d4afb6eede9b476e5faabb0d609.camel@gmail.com> <86y243kdoo.fsf@gmail.com> <899587fb6a76ddfa37d197d3d0fd23cdc7ad8592.camel@gmail.com> <867dbmi7pf.fsf@gmail.com> <3d448fe42f0c43574db96fa26aecd7da5fd5a95d.camel@gmail.com> <877dbkmjm9.fsf@netris.org> <762e9fb7116c442bf0f8f63221bf32fa2b77f2cf.camel@gmail.com> <87y240kq2i.fsf@netris.org> <9362c6fb7e34ded5d009c3f79cd18300d6cd539c.camel@gmail.com> <87r19rkx9h.fsf@netris.org> <86bl0url52.fsf@gmail.com> <86bf0d941ff6095961670a41478e603fa961e498.camel@gmail.com> <864k6lw4vh.fsf@gmail.com> <8fc6f95442ff8c5f0d5a317a84b7bdd180543cae.camel@gmail.com> <86tuektz7j.fsf@gmail.com> <0fff4aa2b320a82905c4b6bd43f7cd3d6e7493c6.camel@gmail.com> <864k6ke87e.fsf@gmail.com> Content-Type: text/plain; charset="UTF-8" User-Agent: Evolution 3.42.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Host-Lookup-Failed: Reverse DNS lookup failed for 2a00:1450:4864:20::343 (failed) Received-SPF: pass client-ip=2a00:1450:4864:20::343; envelope-from=liliana.prikler@gmail.com; helo=mail-wm1-x343.google.com X-Spam_score_int: 6 X-Spam_score: 0.6 X-Spam_bar: / X-Spam_report: (0.6 / 5.0 requ) DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RDNS_NONE=0.793, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1641273859; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=a4T6KDooj/cO5J/OOnkAyuXRS+RC4hXTHEiWBkrBHSY=; b=EENH57umDedhyBz3QDaEOBElvxyT/Hj4tRCBDdoz/91LuoOC0B3nGj44bwMjj7/Ay8Ewwh XxjVhu3JAyMaDYlxtqGG4j7dqQn2DEaQ3VzMmZ5tlQmwOhOB2I7IFV0Q4ooFVm1RTNkcB7 VEL9s9k3lx2NCasa2q8eDgXcJiV/q/pV6H7MF9K7GTd0OzJ5BOAXmOH/JiHywWUK/Mx5vf kTmSWPuRxlHDhBCg5SuWbv6HKtwq6VsLZvrmZAct2qAUhCQaD1EbY9Dl4ISTUgRBzXjUwZ dc0cjVP16gYMTwKx4nb7j79pjlDwviZm6HwxFV4TCGXcgIHop58hsJIbfGXKJg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1641273859; a=rsa-sha256; cv=none; b=oGi/YHeREeDAFtjRZjb0awKcTGBIIl4PmVMSxmGotmb1Ie+i98aDCMstarQPM2ZkqTQekp G3pJWHoKFTIS7mcF74++ixKPotftzdNxo/BWX73luskeSwue1huysb95iHsr86hHLjsX8/ BlmIcHThU/zCj46dfahKZPTAiN8SQXjEPVfwTZXrY+XpgstUvRey3uHtQbQBghDOOkdFK/ euI4zdnOiwHq7orfrzuCgk6ODqhgFFycYAXdZLv9D+PYglgwTaUhZORNaFwbb51KlnqUuN DmcoJTWTCXDgI43TGRWeaQDe4p4bSsa4v8ooGvii9cocT50nX4BHKs56VzZnzA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=X+e4dZdw; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -4.29 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=X+e4dZdw; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 8BE771B92F X-Spam-Score: -4.29 X-Migadu-Scanner: scn1.migadu.com X-TUID: 1PAX83bVCPaQ Hi simon, Am Dienstag, dem 04.01.2022 um 00:00 +0100 schrieb zimoun: > [...] > > You are saying what I predicted you will say :-) ; here I quote > myself: > >         The statement «Git commit hashes do not just depend on the >         content» is wrong.  [...] > > Sorry, I used meta-content instead of “content content”. :-) In all > cases, that is part of the content that is hashed.  Well, maybe I > appears picky but I feel there is a fundamental misunderstanding > somewhere. :-) > > [...] >         $ echo hello > hello.txt > >         $ cat hello.txt | git hash-object --stdin >         ce013625030ba8dba906f756967f9e9ca394464a > >         $ guix hash -S git -H sha1 -f hex hello.txt >         ce013625030ba8dba906f756967f9e9ca394464a > > Or using the default format and hash function, comparing Git and Nar > serializers: > >         $ guix hash -S nar hello.txt >         04zwf782yjwnh3q6hz5izfd6jyip8kgw6g6yj43fiqhbyhdd0dqw > >         $ guix hash -S git hello.txt >         1d7bp5nmgpi5j1ikglw3l7ry7dzczlhp8wl79arl75g2kqyxiy1c > > The content can be one file, some files, folders, etc.  or Git > objects as Git commit object or Git tree object or whatever.  > Therefore, Git commit hash only depends on the content itself, i.e., > Git commit object; as explained by the pointer provided earlier in > the thread, > >     At some point in there (you can figure out yourself where), you are mistakenly equating file hashes and commit hashes, which you make comparison to other tools which only regard the files as content. One of them is immutable for all I know, the other is subject to very observable changes. > Last, identifier is different from integrity checksum.  Especially, > if a collision is possible, then it invalidates the integrity > checksum.  A collision for an identifier does not matter so much > security-wise, because it just implies that the lookup is not unique > or that one content is unreachable.  Well, collision is for sure an > issue and can break the content-address system, even can lead to > security troubles for extreme cases, but also for sure, it does not > change the relation between Git commit hash and content. "Lookup is not unique" is exactly the problem we have for robustness with tags, however. > Therefore, from my side, I consider it as a final word. Fair enough, we can agree on the conclusion even if reached by different methods. Cheers