[Mac_crypto] Apple should use SHA! (or stronger) to authenticate software releases

2004-04-04 Thread R. A. Hettinga
--- begin forwarded text To: [EMAIL PROTECTED] From: Arnold G. Reinhold [EMAIL PROTECTED] Subject: [Mac_crypto] Apple should use SHA! (or stronger) to authenticate software releases Sender: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] List-Id: Macintosh Cryptography mac_crypto.vmeng.com

Re: Do Cryptographers burn?

2004-04-04 Thread Hadmut Danisch
On Sat, Apr 03, 2004 at 11:49:15PM +0100, Dave Howe wrote: If you mean he gave a false assurance of the security of a product for a friend - why would he do that? I can't think of any of my friends who would want me to tell them sofware was secure if it wasn't. ... I suppose that depends on

Re: [Mac_crypto] Apple should use SHA! (or stronger) to authenticate software releases

2004-04-04 Thread Don Davis
hi, mr. reinhold -- there's stronger reason than the ones you cite, to distrust md5 as a message-digest. see these old sci.crypt threads, and the google-search below, for discussions of hans dobbertin's 1996 crack of md5: http://tinyurl.com/2ox7g http://tinyurl.com/3x446

Re: Do Cryptographers burn?

2004-04-04 Thread Dave Howe
Hadmut Danisch wrote: - He didn't find any single mistake. He just says that everything is already known and taken from literature. certainly possible - if he didn't know (or deliberately ignored) that it had been written in 1988 :) How much of it is *still* new or at least hard to find in the