Re: other mhash hashes

From: Date: Wed, 16 Feb 2005 17:19:30 +0000
Subject: Re: other mhash hashes
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-208846@lists.php.net to get a copy of this message
Burhan Khalid wrote: > David Norman wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> I thought some other people would be interested in the other hashes >> that you can do with mhash that aren't on the php.net docs after the >> recent news that SHA-1 might be weaker than previously thought: >> >> >> http://www.schneier.com/blog/archives/2005/02/sha1_broken.html Before we get a hundred posts about SHA-1 being "broken" would eveyrbody please read: http://nuglops.com/blog/index.php?p=1021 and maybe *ALL* the contributions way down at the bottom of the original post link? You're still looking at thousands of years or millions of dollars to break SHA-1 if you want to start TODAY. The wise reader will put "Upgrade to SHA-256" on their "ToDo" list and go back to work now. :-) Though I did find the post to add meta-data such as the character distribution to the hash interesting... The odds on a SHA-1 being the same for two plain-texts *AND* having the same number of E's in the plain-texts? Really really really low, seems to me. -- Like Music? http://l-i-e.com/artists.htm

« previous php.general (#208846) next »