[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: AH-MD5

>SHA (and for that matter Skipjack) were designed to meet a stated
>a priori requirement of 80 bits of strength.  That number seems reasonable

On the other hand, SHA was designed by NSA. And NSA cannot be unaware
of the ease of using crypto hash functions for encryption.  This makes
me as skeptical of SHA as I am of Skipjack and DSS.

I'd stick to MD5 for now, with a door open for other algorithms of
course. After SHA has undergone a thorough and open civilian review,
we can revisit the issue.

Phil
Follow-Ups: References: