> Hashes need not be 32-bit. Hashes created using MD5, the default algorithm
> used by CFMX, are 128-bit, 32 character strings. CFMX 7 supports SHA-1,
> SHA-256, SHA-384 and SHA-512 out of the box, plus you can use
> hash functions
> provided by any Java security provider you install. SHA-1 creates
> a 160-bit
> message digest, and the newer versions create hashes using the number of
> bits specified in their names.
>
> FIPS 180-1 describes the SHA/SHS standard:
> http://www.itl.nist.gov/fipspubs/fip180-1.htm
>
> "The SHA-1 is designed to have the following properties: it is
> computationally infeasible to find a message which corresponds to a given
> message digest, or to find two different messages which produce the same
> message digest."
>
> Of course, what's computationally infeasible now may not be in the future,
> in some cases.
>
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/

FWIW, Bruce Schneier's discussion of hashing algorithms refers to MD-5 as
having been broken, and SHA-1 somewhat on its way towards obsolesence, but
not as an emergency.

Don't think he'd suggest panic over the state of MD-5 either, but the first
reference below includes a link to "a paper demonstrating a technique for
finding MD5 collisions quickly: eight hours on 1.6 GHz computer."

See here:
http://www.schneier.com/blog/archives/2005/03/more_hash_funct.html

and:
http://www.schneier.com/blog/archives/2005/02/cryptanalysis_o.html

Dave Merrill



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Logware (www.logware.us): a new and convenient web-based time tracking 
application. Start tracking and documenting hours spent on a project or with a 
client with Logware today. Try it for free with a 15 day trial account.
http://www.houseoffusion.com/banners/view.cfm?bannerid=67

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:206022
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to