SHA-1 results available

Florian Weimer fw at deneb.enyo.de
Wed Feb 23 17:03:46 EST 2005


* Jack Lloyd:

> http://theory.csail.mit.edu/~yiqun/shanote.pdf

Thanks for the pointer.

> No real details, just collisions for 80 round SHA-0 (which I just confirmed)
> and 58 round SHA-1 (which I haven't bothered with), plus the now famous work
> factor estimate of 2^69 for full SHA-1.
>
> As usual, "Technical details will be provided in a forthcoming paper." I'm not
> holding my breath.

In addition, there's no trace of the second-preimage attack some
persons recently alluded to.

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com



More information about the cryptography mailing list