SHA-1 rumors

Eric Rescorla ekr at
Mon Aug 16 15:32:57 EDT 2004

Ed Felten's blog is carrying the rumor that a break in SHA-1
is going to be announced soon:

I've also done some off-the-cuff analysis of how bad this
would be in practice, which you can find here:

The key question is whether it's just collisions, which would
be embarassing, but which don't affect most applications, or
whether there is forward progress in finding preimages.

Anyone know anything about this rumor?


P.S. AFAIK, although Dobbertin was able to find preimages for
reduced MD4, there still isn't a complete break in MD4. Correct?

The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at

More information about the cryptography mailing list