Comment 2 for bug 1556666

Anders Kaseorg (andersk) wrote :

Length extension attacks are not relevant to apt. (For example, no part of the hashed data is secret, and the hash is not used as a MAC.)