Get the latest tech news
Linux 6.14 To Switch From SHA1 To SHA512 For Module Signing By Default
While many Linux distribution vendor kernels are already using SHA-512 for signing modules by default rather than the default SHA-1, the upstream Linux 6.14 kernel is also now switching the default over to using SHA-512 for better security.
SHA512 is more modern and much more secure than SHA1 against attacks with SHA1 weaknesses being well known for many years at this point. SHA1 signing support remains available within the Linux kernel at this time but no longer the default. It's a long overdue change for using SHA512 as the upstream default for signing kernel modules and will be part of Linux 6.14 with the code merged today.
Or read this on Phoronix
