C Matthew Curtin (cmcurtin@interhack.net)
Fri, 21 Aug 1998 08:17:07 -0400 (EDT)
>>>>> "Dan" == Daniel R Oelke <Dan.Oelke@aud.alcatel.com> writes:
Dan> Ok, I have the crypto2.0 and crypto2.3 libraries, but am having a
Dan> hard time extracting *just* the MD5 or SHA code from it.
You might also want to be aware that Hans Dobbertin has done some
interesting attacks against MD5. While he hasn't shown real breakage
in any sense, he argues that his results look like some of the early
results against MD4, and that we might want to avoid MD5 for new
applications.
See CryptoBytes, v2n2,
<http://www.rsa.com/rsalabs/pubs/cryptobytes/html/article_index.html>
I'm curious what others think about the attack, and whether it's
paranoia to suggest avoiding MD5.
-- Matt Curtin cmcurtin@interhack.net http://www.interhack.net/people/cmcurtin/
The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:10:59