On Feb 17, 12:38 pm, Geoff Beier <[email protected]> wrote: > On Thu, Feb 17, 2011 at 12:31, Jeffrey Walton <[email protected]> wrote: > > > When the collisions were engineered using the extra data, what digest > > was in play? MD2 or MD5? I would be surprised if someone could do it > > with SHA-1, and bet against it with near certainty when using SHA-2 or > > Whirlpool. > > SHA-1. Here's a good explanation of the mechanics: > http://www.mail-archive.com/[email protected]/msg06537.html OK, thanks. I updated the page with a note on signing keys, exponents of 3, and the US-Cert advisory.
Jeff -- You received this message because you are subscribed to the "Crypto++ Users" Google Group. To unsubscribe, send an email to [email protected]. More information about Crypto++ and this group is available at http://www.cryptopp.com.
