> http://theory.csail.mit.edu/~yiqun/shanote.pdf > > No real details, just collisions for 80 round SHA-0 (which I > just confirmed) > and 58 round SHA-1 (which I haven't bothered with), plus the > now famous work > factor estimate of 2^69 for full SHA-1. > > As usual, "Technical details will be provided in a > forthcoming paper." I'm not > holding my breath.
A preprint was circulating at the RSA conference; Adi Shamir had a copy. Similar techniques were used by Vincent Rijmen and Elizabeth Oswald, in their paper available at .http://eprint.iacr.org/2005/010. William --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to [EMAIL PROTECTED]