LeRoy Cressy on 15 Mar 2005 19:38:13 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[PLUG] SHA-1 Broken


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Today in the Wall Street Journal and Bruce Schneier have described how
how SHA-1 is broken as shown in the following URL.

http://www.schneier.com/blog/archives/2005/02/cryptanalysis_o.html

The default signature hash in GnuPG is SHA-1.  Though the signature is
verified, it seems that Bruce Schneier and others seem to indicate that
there should be a new hash made that is a lot tighter.

What do some of you think?

LeRoy :-)

- --
 Rev. LeRoy D. Cressy  mailto:leroy@lrcressy.com   /\_/\
                       http://lrcressy.com        ( o.o )
                       Phone:  215-535-4037        > ^ <
                       FAX:    215-535-4285

gpg fingerprint:  62DE 6CAB CEE1 B1B3 359A  81D8 3FEF E6DA 8501 AFEA

For info on enigmail:    http://lrcressy.com/linux/mozilla.pdf
For info on gpg:         http://www.gnupg.org/

Jesus saith unto him, I am the way, the truth, and the life:
no man cometh unto the Father, but by me. (John 14:6)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFCNzljP+/m2oUBr+oRAvsVAKCD88nc0PKlR1BAyxINjCeGDkUnaQCfTEKE
0tCNaUHUNXUjWuRAiDNhmnI=
=IKr7
-----END PGP SIGNATURE-----
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug