From: bitblt <bitblt@openbsd.org>
Date: Mon, 27 Jan 1997 20:14:21 +0000 (+0000)
Subject: Added a WARNING about not using it to detect back doors.
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=0f811b65a3a67022f5dd15a91fd1fe27e1b5b7be;p=openbsd

Added a WARNING about not using it to detect back doors.
---

diff --git a/usr.bin/cksum/cksum.1 b/usr.bin/cksum/cksum.1
index 1a1dbed2006..630599da16f 100644
--- a/usr.bin/cksum/cksum.1
+++ b/usr.bin/cksum/cksum.1
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: cksum.1,v 1.2 1996/06/26 05:32:01 deraadt Exp $
+.\"	$OpenBSD: cksum.1,v 1.3 1997/01/27 20:14:21 bitblt Exp $
 .\"	$NetBSD: cksum.1,v 1.8 1995/09/02 05:45:15 jtc Exp $
 .\"
 .\" Copyright (c) 1991, 1993
@@ -157,6 +157,14 @@ The
 and
 .Nm sum
 utilities exit 0 on success, and >0 if an error occurs.
+.Sh WARNING
+Do not use
+.Nm sum 
+or 
+.Nm cksum
+to detect hostile binary modifications.  An attacker
+can trivially produce backdoored daemons which have the same CRC as the
+standard versions.  Use a cryptographic checksum, such as MD5 instead.
 .Sh SEE ALSO
 The default calculation is identical to that given in pseudo-code
 in the following