Fwd: 80-bit security? (Was: Re: SHA-1 collisions now at 2^{52}?)

2009-05-10 Thread Sandy Harris
On Fri, May 8, 2009 at 10:28 AM, Brandon Enright wrote: > "Steven M. Bellovin" wrote: > >> On Thu, 30 Apr 2009 17:44:53 -0700 >> Jon Callas wrote: >> >> > The accepted wisdom >> > on 80-bit security (which includes SHA-1, 1024-bit RSA and DSA keys, >> > and other things) is that it is to be ret

Re: 80-bit security? (Was: Re: SHA-1 collisions now at 2^{52}?)

2009-05-08 Thread Paul Hoffman
At 8:54 PM -0400 5/6/09, Steven M. Bellovin wrote: >On Thu, 30 Apr 2009 17:44:53 -0700 >Jon Callas wrote: > >> The accepted wisdom >> on 80-bit security (which includes SHA-1, 1024-bit RSA and DSA keys, >> and other things) is that it is to be retired by the end of 2010. > >That's an interesting s

Re: 80-bit security? (Was: Re: SHA-1 collisions now at 2^{52}?)

2009-05-08 Thread Brandon Enright
On Wed, 6 May 2009 20:54:34 -0400 "Steven M. Bellovin" wrote: > On Thu, 30 Apr 2009 17:44:53 -0700 > Jon Callas wrote: > > > The accepted wisdom > > on 80-bit security (which includes SHA-1, 1024-bit RSA and DSA keys, > > and other things) is that it is to be retired by the end of 2010. > > T

80-bit security? (Was: Re: SHA-1 collisions now at 2^{52}?)

2009-05-07 Thread Steven M. Bellovin
On Thu, 30 Apr 2009 17:44:53 -0700 Jon Callas wrote: > The accepted wisdom > on 80-bit security (which includes SHA-1, 1024-bit RSA and DSA keys, > and other things) is that it is to be retired by the end of 2010. That's an interesting statement from a historical perspective -- is it true? And