how to phase in new hash algorithms?

[Bart Preneel]

As ex-NESSIE project manager: NESSIE was an EU-funded research project
with funding for 40 months (2000-2003). The "NESSIE guys" still exist as
individual organizations but the NESSIE project is no longer in existence.

There is a follow-up, but with somewhat different goals, called ECRYPT
(http://www.ecrypt.eu.org). We are organizing a kind of stream cipher
competition. On June 23-24 there will be a workshop on hash functions
in Przegorzaly (Krakow), Poland.
Xiaoyun Wang, Eli Biham, and Hans Dobbertin are invited speakers.

  Deadline for submissions: 1st May 2005
  Early registration deadline: 31st May 2005

We plan to discuss at this workshop also the way to go forward on hash
functions (for example, should there be a new competition for hash functions?).

Organizing this kind of competitions is beyond the current scope and
financial means of IACR, but IACR could consider to sponsor events
related to such an activity.

--Bart

COSIC - Katholieke Universiteit Leuven

On Mon, 21 Mar 2005, Ian G wrote:

> Steven M. Bellovin wrote:
>
> > So -- what should we as a community be doing now?  There's no emergency
> > on SHA1, but we do need to start, and soon.
>
> The wider question is how to get moving on new hash
> algorithms.  That's a bit tricky.
>
> Normally we'd look to see NIST or the NESSIE guys
> lead a competition.  But NESSIE just finished a
> comp, and may not have the appetite for another.
> NIST likewise just came out with SHA256 et al, and
> they seem to have a full work load as it is trying
> to get DSS-2 out.
>
> How about the IACR?  Would they be up to leading
> a competition?  I don't know them at all myself,
> but if the Shandong results are heard at IACR
> conferences, then maybe it's time to take on a
> larger role.
>
> Most of the effort could be volunteer, and it would
> also be easy enough to schedule everything aligned
> with the conference circuit.
>
> Just a thought.  Anyone know anyone at the IACR?
>
> iang
> --
> News and views on what matters in finance+crypto:
>          http://financialcryptography.com/
>
> ---------------------------------------------------------------------
> The Cryptography Mailing List
> Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com
>

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com