Re: [saag] Revision of "Attacks on Cryptographic Hashes in Internet Protocols"

Hi, Paul (et al.),

This doc refers to IETF protocols that use hashes, but doesn't discuss 
any in specific. It also doesn't address how hashes are used, e.g., solo 
(as a fingerprint), keyed (for authentication and source confirmation), 
as part of an HMAC, or as part of key derivation.

That sort of information might be additionally useful, IMO.

Joe

On 11/8/2012 4:29 AM, Paul Hoffman wrote:
> Greetings again. Bruce Schneier and I have started an update to RFC 4270, "Attacks on Cryptographic Hashes in Internet Protocols". This revision is meant to deal with new and more devastating attacks on MD5, the fact that SHA-1 collisions will be financially feasible in the foreseeable future, and NIST's upcoming SHA-3 announcements. We expect to keep this revision process open for at least five months because NIST probably won't finalize the parameters and naming and so on for KECCAK until then; that is, we won't send this to RFC Editor until SHA-3 is finalized. Please take a look at
>
> http://tools.ietf.org/html/draft-hoffman-schneier-4270bis
>
> Sean and Stephen have agreed that we should use the SAAG mailing list for discussing this draft.
>
> --Paul Hoffman
> _______________________________________________
> saag mailing list
> saag@ietf.org
> https://www.ietf.org/mailman/listinfo/saag
>