=================================================================== RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/cksum/Attic/cksum.1,v retrieving revision 1.2 retrieving revision 1.3 diff -u -r1.2 -r1.3 --- src/usr.bin/cksum/Attic/cksum.1 1996/06/26 05:32:01 1.2 +++ src/usr.bin/cksum/Attic/cksum.1 1997/01/27 20:14:21 1.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: cksum.1,v 1.2 1996/06/26 05:32:01 deraadt Exp $ +.\" $OpenBSD: cksum.1,v 1.3 1997/01/27 20:14:21 bitblt Exp $ .\" $NetBSD: cksum.1,v 1.8 1995/09/02 05:45:15 jtc Exp $ .\" .\" Copyright (c) 1991, 1993 @@ -157,6 +157,14 @@ and .Nm sum utilities exit 0 on success, and >0 if an error occurs. +.Sh WARNING +Do not use +.Nm sum +or +.Nm cksum +to detect hostile binary modifications. An attacker +can trivially produce backdoored daemons which have the same CRC as the +standard versions. Use a cryptographic checksum, such as MD5 instead. .Sh SEE ALSO The default calculation is identical to that given in pseudo-code in the following