Bugtraq mailing list archives

Re: SHA-1 broken


From: Michael Cordover <michael.cordover () gmail com>
Date: Thu, 17 Feb 2005 12:02:02 +1100

The standard response to "where to now" seems to be Whirlpool
[http://planeta.terra.com.br/informatica/paulobarreto/WhirlpoolPage.html].
 That or Tiger [http://www.cs.technion.ac.il/~biham/Reports/Tiger/].

The team which has cracked SHA1 is the same that cracked MD5 and
exposed weaknesses in the RIPEMD model.  They're good.  And they've
shown that what I would've thought to be the Next Best Thing - RIPEMD
- is yet another flawed system.

-mjec
-- 
http://mine.mjec.net/

On Wed, 16 Feb 2005 14:56:27 +0200, Gadi Evron <gadi () tehila gov il> wrote:
Now, we've all seen this coming for a while.
http://www.schneier.com/blog/archives/2005/02/sha1_broken.html

Where do we go from here?

        Gadi.



Current thread: