Re: [vwrap] MD5 must die [was: Re: authentication : remove reference to MD5]

On Jul 6, 2010, at 3:38 PM, Peter Saint-Andre wrote:

> On 7/6/10 1:19 PM, Meadhbh Hamrick wrote:
>
>> so to paraphrase winston churchill: "we know it will be hard; we
>> expect it to be long, we cannot predict or measure its episodes or  
>> its
>> tribulations. but one thing is certain, one thing is sure, one thing
>> stands out stark and undeniable, massive and unassailable for all the
>> world to see. we cannot see how deliverance will come or when it will
>> come, but nothing is more certain that every trace of MD5's  
>> footsteps,
>> every stain of its infected, corroding fingers will be expunged and
>> purged and, if need be, blasted from the surface of the (virtual)
>> earth."
>
> MD5 Delenda Est! But remember, Carthage wasn't destroyed in a day. ;-)
>

Yes, and SHA-1 is getting past its due date as well.

Marshall

> /psa
>
>
>
> _______________________________________________
> vwrap mailing list
> vwrap@ietf.org
> https://www.ietf.org/mailman/listinfo/vwrap