Re: Interesting links about vulnerabilities in SHA1 / MD5
Richard Welty <[email protected]>
| Newsgroups | gmane.mail.mahogany.devel |
|---|---|
| Organization | Averill Park Networking |
| Message-ID | <[email protected]> |
On Mon, 23 Aug 2004 15:51:17 +1000 Mark Livingstone <[email protected]> wrote: > http://zdnet.com.com/2100-1105_2-5313655.html?tag=zdfd.newsfeed > http://eprint.iacr.org/2004/199.pdf > http://www.computerworld.com/securitytopics/security/story/0,10801,95343,00.html?nas=SEC2-95343 two cautions here: the sha1 attacks are still theoretical things that don't have practical, real world implications don't confuse checksum vulnerabilities with signed checksum vulnerabilities. even if sha1 falls, hmac-sha1 is still sound, just as hmac-md5 is probably still quite sound. richard -- Richard Welty [email protected] Averill Park Networking 518-573-7592 Java, PHP, PostgreSQL, Unix, Linux, IP Network Engineering, Security ------------------------------------------------------- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285