[109535] in cryptography@c2.net mail archive
Re: PlayStation 3 predicts next US president
daemon@ATHENA.MIT.EDU (James A. Donald)
Sat Dec 1 11:34:23 2007
Date: Sat, 01 Dec 2007 14:24:34 +1000
From: "James A. Donald" <jamesd@echeque.com>
To: "Weger, B.M.M. de" <b.m.m.d.weger@TUE.nl>
CC: cryptography@metzdowd.com, hash-forum@nist.gov
In-Reply-To: <DFA3206A564B80499B87B89B49BCD31302340D61@EXCHANGE3.campus.tue.nl>
Weger, B.M.M. de wrote:
> We also announce two different Win32 executables that
> have identical MD5 hash values. This can be made to
> happen for any two executable files. This implies a
> vulnerability in software integrity protection and
> code signing schemes that still use MD5. See
> http://www.win.tue.nl/hashclash/SoftIntCodeSign for
> details.
That MD5 is broken is of course old news.
I observe that US authorities have decided on a hash,
found it was broken, decided on a new hash, found it was
broken also, and are now where we are.
Russian authorities decided on a 256 bit hash in 1990:
GOST R 34.11-94. It is still good as far as anyone
knows, and has never needed to be changed.
This entirely confirms my prejudices about the US
government cryptographers.
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
