RE: Remove little-used algorithms from IKEv2

[Henry Spencer <[e-mail]>]

On Thu, 14 Mar 2002, Hallam-Baker, Phillip wrote:
> MD5 and SHA are pretty close and share the same internal structure so I
> don't think we can really justify MD5 as a fallback to SHA-1, particularly
> in the light of the Dobbertin results.

Remember that the Dobbertin results appear to be inapplicable to HMAC-MD5,
serious though they are for plain MD5.

One consideration that matters to some people is that MD5 was not designed
by the NSA.  (Saying that this shouldn't matter to them won't make it so.)

This is one place where even FreeS/WAN, which generally is big on "one good
solution, not a choice among ten", offers both.

                                                          Henry Spencer
                                                       [e-mail]