Weakness in SHA-1

Atom 'Smasher' atom at suspicious.org
Sun Sep 26 07:11:54 CEST 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Sat, 25 Sep 2004 vedaal at hush.com wrote:

> if dh/dsa can be modified to accept greater than 160 size and use sha 
> 256, great, if not, then it might be prudent to look into a new hash 
> design that would be non md5/non sha-1 based that would still allow 
> dh/dsa signing at the 160 level
==============

how about RIPEMD-160?

100% compatible with DSS (DSA), already part of GnuPG and it's neither SHA 
nor MD5 based.

even without a weakness in any flavors of SHA i'd like to see DSA (the 
scalable algorithm) formally adopted into larger varieties of DSS (the 
current standard) to allow larger hashes and larger keys. i guess if/when 
that happens DSS will become DSS-0 and larger variants will become DSS-1, 
DSS-2, etc.


         ...atom

  _________________________________________
  PGP key - http://atom.smasher.org/pgp.txt
  762A 3B98 A3C3 96C9 C6B7 582A B88D 52E4 D9F5 7808
  -------------------------------------------------

 	"Think of the press as a great keyboard on which the
 	 government can play."
 		-- Joseph Goebbels, Nazi Propaganda Minister.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.3.6 (FreeBSD)
Comment: What is this gibberish?
Comment: http://atom.smasher.org/links/#digital_signatures

iQEcBAEBCAAGBQJBVk+fAAoJEAx/d+cTpVciGJkH/2SBA6aQOpOD1+zS4yxlS/4/
U9bOk2PGiS+7ipQfcq3h37eGha/5774FcwaVRCmrIE8HSIcvBY4SMqbPwm40nvkc
fR6YGN3lXFgTSh0wB/MAYoRAnzClLxv0yp8cuOu4EtZ4/QnRmYRlWVNFynv+41UP
27pcH4dHg2cKZ1w90mbXvYSdH4dUYAlT18FOOoSKRoVC9ZpfczV4czv8wxRGAigx
rJmnMsXmwX4C0Hnq6WVHU18rlrh+QWc7Ld9FJa8J4O4cqGRB3IGt90qbGto829ng
169Sj38VLdyVwn3a9aT4UeFqPujc04IFnDEdW7UifGKoTN791bqKGIbQABIdGX0=
=FW5W
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list