Re: [OPSEC] minutes part 2

["Vishwas Manral" <[e-mail]>]

Hi Ran,

> I've consistently asked for a peer reviewed paper.
> I like Hugo, but an email containing another person's
> opinion is not a peer-reviewed paper.
I agree you have asked for a peer reviewed paper for the exact use of
SHA for IGP's.

> Mind, such paper ought to be about the algorithms *in the modes
> used for IGPs* since the matter at hand is IGPs.
>
> If someone has done some formal maths and published it,
> in some peer reviewed forum, please provide a citation
> (or URL or something) to that paper so everyone can read it.
>
> Hugo publishes from time to time, if he has published on
> this, it would be helpful if he'd provide the full
> citation (a URL to the paper would also be nice).
It seems you are hinting at a bigger issue here, that the IETF AD's
may need to change the policy regarding MD5 vs SHA-1 (for use in any
cryptographic function), because even though cryptographers may state
that MD5 is stronger than SHA-1 even for secure hashing purposes, it
may not necessarily be true.

Thanks,
Vishwas
_______________________________________________
OPSEC mailing list
[e-mail]
https://www.ietf.org/mailman/listinfo/opsec