This is the mail archive of the
libc-alpha@sources.redhat.com
mailing list for the glibc project.
Re: SHA-1 in libcrypt
On Mon, Jul 17, 2000 at 01:14:18PM -0700, Geoff Keating wrote:
> You haven't said why you want SHA...
First of all, it's 160-bit which makes it more resistant to attacks than MD5 which is 128-bit. Second, MD5 has attacked successfully, producing collisions. Third, it is considered the most secure one-way hash function by many of the top cyptographers, including Bruce Schneier. He also recommends SHA over MD5 and his own blowfish cipher, which is what OpenBSD uses. Also, SHA is required to be used by the U.S. government, so using SHA in glibc would allow Linux systems to be used in those enviroments.
--
RoboHak RoboHak@protovision.org | RoboHak@mediaone.net
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GAT d-(--) s++:-- a-- C+++(++++) UL++++ UB++++ P+@ L+++(++++) E-
W+++(--)$ N+@ o? K w--- O-- M-- V-- PS+ PE Y++@ PGP++@ t+ 5(+) X+@
R tv+@ b++@ DI+++ D++@ G e h! r-- y--
------END GEEK CODE BLOCK------