[42543] in Cypherpunks
Re: Keyed-MD5, ITAR, and HTTP-NG
daemon@ATHENA.MIT.EDU (hallam@w3.org)
Mon Oct 30 19:03:06 1995
To: Simon Spero <ses@tipper.oit.unc.edu>, cypherpunks@toad.com
Cc: hallam@w3.org
In-Reply-To: Your message of "Mon, 30 Oct 95 10:12:45 PST."
<Pine.SOL.3.91.951030101221.319D-100000@chivalry>
Date: Mon, 30 Oct 95 18:51:59 -0500
From: hallam@w3.org
Simon,
Do not spec Keyed MD5, it is a complete looser. It is actually weak
against a number of attacks. There are much better constructs for creating
a keyed digest. There are much better ways of creating a digest than using
a hash fuinction as the base.
There is some work by Phil Rogaway on making keyed digest functions
which I strongly recommend people look at. I can post a paper on the subject if
people are interested.
Phill
