Weaknesses in SHA-1

vedaal at hush.com vedaal at hush.com
Mon Sep 27 21:19:13 CEST 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

David Shaw dshaw at jabberwocky.com 
Mon Sep 27 16:49:30 CEST 2004 wrote:

] Why would you use Tiger192 when SHA256 is available?  
] I imagine SHA256 is getting a lot more attention by people 
] trying to break it than Tiger192 is.


to be able to use it with dh/dsa

tiger is available as tiger 160
and is independent of md 'x', sha, and ripemd in design,

http://www.nullify.org/docs/tiger.pdf

if it 'was' already accepted in open-pgp,
without any 'deprecation' remarks,

the it should be able to be considered secure,

and in light of recent events,
it may be looked at more carefully, as it is the only design
type that has not yet had a weakness demonstrated,

and  more people might move to use it now,
if it were still available.


in an effort to 'move away' from v3 keys ;-) ,
and introduce my new v4 rsa keys,
am signing with both my old v3 key, and the v4 rsa key,

and will try to use the v4 key except for pgp2.x users.

vedaal
[any 'bad' sig is because of hushmail mangling  ;-(( ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.3.6 (MingW32)
Comment: Acts of Kindness better the World, and protect the Soul
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=fTpi
-----END PGP SIGNATURE-----




Concerned about your privacy? Follow this link to get
secure FREE email: http://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
http://www.hushmail.com/services-messenger?l=434

Promote security and make money with the Hushmail Affiliate Program: 
http://www.hushmail.com/about-affiliate?l=427



More information about the Gnupg-users mailing list