Add a note about cryptography

Fixes #48
This commit is contained in:
Martin Briza 2017-01-09 09:53:43 +01:00
parent 1597a28eb1
commit 5a39d0d178
3 changed files with 21 additions and 1 deletions

15
CRYPTOGRAPHY.md Normal file
View File

@ -0,0 +1,15 @@
# Cryptographic features of Fedora Media Writer
There are two separate checksum validation processes integrated in the Fedora Media Writer.
## SHA256 hash
All Fedora images (except Atomic) have a SHA256 hash assigned when created. This hash is included in the release metadata that's included in Fedora Media Writer and also in the releases.json file that's provided as a part of Fedora Websites and served over HTTPS.
Fedora Media Writer then computes SHA256 hash of the ISO data being downloaded to check if the image is counterfeit or not.
## Integrated MD5 ISO checksum
All Fedora ISO images have an integrated MD5 checksum for integrity purposes.
Fedora Media Writer verifies this checksum right after the image is downloaded and also after the image has been written to a flash drive to verify if it has been written correctly.

View File

@ -49,3 +49,7 @@ To release a standalone package, use `macdeployqt`, supplied with your Qt instal
If you want to help with translating Fedora Media Writer, please visit our [Zanata project page](https://fedora.zanata.org/iteration/view/mediawriter/master).
Information about the individual Fedora flavors are retrieved from the websites and translated as a separate project.
## Other information
For details about cryptography, see [CRYPTOGRAPHY.md](CRYPTOGRAPHY.md).

3
dist/win/build.sh vendored
View File

@ -60,7 +60,8 @@ fi
if [ "$1" == "local" ]; then
echo "=== Building"
mingw32-qmake-qt5 ..
mingw32-make -j9 >/dev/null
mingw32-make -j9
else
mkdir -p "app/release"
echo "=== Getting distribution binary"