Re: Minimum length of secret key

Michel Bouissou a écrit:

> This actually looks quite short to me, especially as $4.1 of the same
document
> states that the hash comparison will pass with only a warning if the case
of
> the hash would have been modified. I wonder if this doesn't reduce the
> security of the hash to about 20 bits for a 4-characters hash...

That is no problem because even with a hash of only 20 bits the spammer
would have to send one million mails to get one through.

Roger