[42590] in Cypherpunks
Re: Keyed-MD5, ITAR, and HTTP-NG
daemon@ATHENA.MIT.EDU (Perry E. Metzger)
Tue Oct 31 14:52:31 1995
To: hallam@w3.org
Cc: Simon Spero <ses@tipper.oit.unc.edu>, cypherpunks@toad.com
In-Reply-To: Your message of "Mon, 30 Oct 1995 18:51:59 EST."
<9510302351.AA28243@zorch.w3.org>
Reply-To: perry@piermont.com
Date: Tue, 31 Oct 1995 18:31:14 -0500
From: "Perry E. Metzger" <perry@piermont.com>
hallam@w3.org writes:
> Do not spec Keyed MD5, it is a complete looser. It is actually weak
> against a number of attacks. There are much better constructs for creating
> a keyed digest. There are much better ways of creating a digest than using
> a hash fuinction as the base.
What???
A keyed version of MD5 is the base authentication mechanism in IPSP
and it has been heavily examined by a number of very good
cryptographers.
Perry
