SHA-1 rumors

[Eric Rescorla]

Ed Felten's blog is carrying the rumor that a break in SHA-1
is going to be announced soon:

http://www.freedom-to-tinker.com/archives/000661.html

I've also done some off-the-cuff analysis of how bad this
would be in practice, which you can find here:

http://www.rtfm.com/movabletype/archives/2004_08.html#001051

The key question is whether it's just collisions, which would
be embarassing, but which don't affect most applications, or
whether there is forward progress in finding preimages.

Anyone know anything about this rumor?

-Ekr

P.S. AFAIK, although Dobbertin was able to find preimages for
reduced MD4, there still isn't a complete break in MD4. Correct?

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com