On Sun, May 3, 2009 at 4:35 PM, Christian Rechberger <christian.rechber...@tugraz.at> wrote: > The design of DES facilitates this kind of throughput/cost gains on FPGAs. > > Remember that the MD4 family (incl. SHA-1) was designed to be efficient on > 32-bit CPUs. For these hash functions, it is much harder to get a > throughput/cost gain on FPGAs compared to off-the-shelf CPUs. At least, this > was my conclusion when I quickly looked into this a few years ago. >
The n...@home project(http://nsa.unaligned.org/) seems to do it pretty well. He even provides the optimized SHA-1 and MD5 Verilog code used. This only works because straight-up bruteforce requires little memory, though. If the new SHA-1 break requires significant memory usage I don't think something like the COPACOBANA can help. Regards, -- Thomas Coppi --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majord...@metzdowd.com