[15998] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: On hash breaks, was Re: First quantum crypto bank transfer

daemon@ATHENA.MIT.EDU ("Hal Finney")
Tue Aug 24 15:12:44 2004

X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
To: ashwood@msn.com, cryptography@metzdowd.com
Date: Tue, 24 Aug 2004 11:00:46 -0700 (PDT)
From: hal@finney.org ("Hal Finney")

Joe Ashwood writes:
> Except for RIPEM there were known to be reasons for this, MD5 was 
> known to be flawed, SHA-0 was replaced because it was flawed (although 
> knowledge of the nature of the flaw was hidden). Even with RIPEM (and SHA-1 
> for the same reason) I have plans in place (and have had for some time) the 
> move away from 160-bit hashes to larger ones, so the attack on RIPEM had 
> little effect on me and my clients...

A minor terminology correction: the hash is RIPEMD, the more recent (and
still unbroken) version being RIPEMD-160.  RIPEMD is the RIPE Message
Digest, where RIPE is the EU's RACE Integrity Primitives Evaluation
project, and I haven't been able to find out what RACE stands for.

RIPEM was an old implementation by Mark Riordan of the PEM (Privacy
Enhanced Email) standard which preceded S/MIME.

Hal Finney

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post