texlive: use sha256 (#130097)

pkgs/tools/typesetting/tex/texlive/default.nix

@@ -19,7 +19,6 @@ let
   };
 
   # map: name -> fixed-output hash
-  # sha1 in base32 was chosen as a compromise between security and length
   fixedHashes = lib.optionalAttrs useFixedHashes (import ./fixedHashes.nix);
 
   # function for creating a working environment from a set of TL packages
@@ -175,7 +174,7 @@ let
           };
         } // lib.optionalAttrs (fixedHash != null) {
           outputHash = fixedHash;
-          outputHashAlgo = "sha1";
+          outputHashAlgo = "sha256";
           outputHashMode = "recursive";
         }
       )

pkgs/tools/typesetting/tex/texlive/fixHashes.awk

@@ -10,7 +10,7 @@ BEGIN {
     print "No match for \""$0"\"" > "/dev/stderr"
     exit 1
   }
-  cmd="nix-hash --type sha1 --base32 "$0
+  cmd="nix-hash --type sha256 --base32 "$0
   if (( cmd | getline hash ) <= 0) {
     print "Error executing nix-hash" > "/dev/stderr"
     exit 1