[16967] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

RE: SHA-1 results available

daemon@ATHENA.MIT.EDU (Whyte, William)
Thu Mar 3 14:31:30 2005

X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
From: "Whyte, William" <WWhyte@ntru.com>
To: Jack Lloyd <lloyd@randombit.net>, cryptography@metzdowd.com,
	cypherpunks@al-qaeda.net
Date: Tue, 22 Feb 2005 12:30:22 -0500


> http://theory.csail.mit.edu/~yiqun/shanote.pdf
> 
> No real details, just collisions for 80 round SHA-0 (which I 
> just confirmed)
> and 58 round SHA-1 (which I haven't bothered with), plus the 
> now famous work
> factor estimate of 2^69 for full SHA-1.
> 
> As usual, "Technical details will be provided in a 
> forthcoming paper." I'm not
> holding my breath.

A preprint was circulating at the RSA conference; Adi Shamir 
had a copy. Similar techniques were used by Vincent Rijmen
and Elizabeth Oswald, in their paper available at
.http://eprint.iacr.org/2005/010.

William

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post