On Mon, 23 Aug 2004 15:51:17 +1000 Mark Livingstone <[EMAIL PROTECTED]> wrote:

> http://zdnet.com.com/2100-1105_2-5313655.html?tag=zdfd.newsfeed
> http://eprint.iacr.org/2004/199.pdf
> http://www.computerworld.com/securitytopics/security/story/0,10801,95343,00.html?nas=SEC2-95343

two cautions here:

the sha1 attacks are still theoretical things that don't have practical,
real world implications

don't confuse checksum vulnerabilities with signed checksum vulnerabilities.
even if sha1 falls, hmac-sha1 is still sound, just as hmac-md5 is probably
still quite sound.

richard
-- 
Richard Welty                                         [EMAIL PROTECTED]
Averill Park Networking                                         518-573-7592
    Java, PHP, PostgreSQL, Unix, Linux, IP Network Engineering, Security



-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Mahogany-Developers mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/mahogany-developers

Reply via email to