--- begin forwarded text
To: [EMAIL PROTECTED]
From: Arnold G. Reinhold [EMAIL PROTECTED]
Subject: [Mac_crypto] Apple should use SHA! (or stronger) to authenticate
software
releases
Sender: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
List-Id: Macintosh Cryptography mac_crypto.vmeng.com
On Sat, Apr 03, 2004 at 11:49:15PM +0100, Dave Howe wrote:
If you mean he gave a false assurance of the security of a product for a
friend - why would he do that? I can't think of any of my friends who would
want me to tell them sofware was secure if it wasn't.
...
I suppose that depends on
hi, mr. reinhold --
there's stronger reason than the ones you cite,
to distrust md5 as a message-digest. see these
old sci.crypt threads, and the google-search below,
for discussions of hans dobbertin's 1996 crack
of md5:
http://tinyurl.com/2ox7g
http://tinyurl.com/3x446
Hadmut Danisch wrote:
- He didn't find any single mistake. He just says that everything is
already known and taken from literature.
certainly possible - if he didn't know (or deliberately ignored) that it had
been written in 1988 :)
How much of it is *still* new or at least hard to find in the