[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: AH-MD5



On Jan 30, 13:01, uri@watson.ibm.com wrote:
% Subject: Re: AH-MD5
%
% Oh, come on... My preliminary and completely unscientific
% benchmark showed it to be about twice as slow as MD5...
End of excerpt from uri@watson.ibm.com

Uri,

  Your performance measurements are sufficient to convince me that
SHA could not be universally deployed at this time.  Major computer
vendors are already VERY uncomfortable with the MD5 performance
hit and have told me that they simply will not deploy anything
worse than MD5.  Most vendors are currently fence-sitting about
MD5 because its performance impact is very noticable.

  We need a solution that can and will be deployed today.  SHA
is not that solution at this time, though it might be in a few
years.  Hence the need for an algorithm-independent protocol spec.

  As an aside, I have always found Hilarie's work to be VERY
credible and so I believe her assertions apply to her tested
platform as stated.

Regards,

Ran
atkinson@itd.nrl.navy.mil



Follow-Ups: References: