www.runtimeware.com Forum Index www.runtimeware.com
Security and compliance simplified
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Flaws found in 'popular' hashing algorithms?

 
Post new topic   Reply to topic    www.runtimeware.com Forum Index -> Security Warnings and Updates
View previous topic :: View next topic  
Author Message
RWareDerek
Site Admin


Joined: 24 Jan 2004
Posts: 193
Location: San Jose, CA

PostPosted: Thu Mar 17, 2005 8:57 am    Post subject: Flaws found in 'popular' hashing algorithms? Reply with quote

From CNN.com:

Quote:
NEW YORK (CNN/Money) - The discovery of a crack in a commonly used Internet encryption technique raised concerns among government agencies and computer-code experts, according to a report by The Wall Street Journal.


http://money.cnn.com/2005/03/15/technology/encryption/index.htm?cnn=yes

I only wish this article wasn't generic enough to not mention the specific algorithms that have been 'exploited'....
_________________
Runtimeware.com Software Developer

Ask me anything!!! (About Sentinel of course) Very Happy
Back to top
View user's profile Send private message Visit poster's website AIM Address MSN Messenger
RWareDerek
Site Admin


Joined: 24 Jan 2004
Posts: 193
Location: San Jose, CA

PostPosted: Thu Mar 17, 2005 9:22 am    Post subject: Reply with quote

Apparently, the researchers found collisions in the SHA-1 algorithm (which isn't exactly NEW news) - this isn't a reason to panic by any means (breaking SHA-1 is not feasable for any individual)...what it does prove is that SHA-1 should be phased out within the next couple years

News about the SHA-1 collision:
http://www.infoworld.com/article/05/02/16/HNshaflaw_1.html

Interesting article about the SHA-1 news:
http://www.schneier.com/crypto-gram-0503.html

First portion of the paper that the researchers who found the exploit released:
http://theory.csail.mit.edu/~yiqun/shanote.pdf
_________________
Runtimeware.com Software Developer

Ask me anything!!! (About Sentinel of course) Very Happy
Back to top
View user's profile Send private message Visit poster's website AIM Address MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic    www.runtimeware.com Forum Index -> Security Warnings and Updates All times are GMT - 7 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group