Slashdot Banner
Stories
Slash Boxes
Comments
typodupeerror delete not in

+-   NIST Cryptographic Hash Contest, round 1-> on Saturday December 20 2008, @11:58PM jd

Submitted by jd on Saturday December 20 2008, @11:58PM
encryption
jd writes "NIST has announced the round 1 candidates for the Cryptographic Hash Algorithm Challenge. Of the 64 who submitted entries, 51 were accepted. Of those, in mere days, one has been definitely broken and three others are believed to have been. At this rate, it won't take the couple of years NIST were reckoning to whittle down the field to just one or two.

(In comparison, the European Union version, NESSIE, recieved just one cryptographic hash function for it's contest. One has to wonder if NIST and the crypto experts are so concerned about being overwhelmed with work for this current contest, why they all but ignored the European effort. A self-inflicted wound might hurt, but it's still self-inflicted.)

Popular wisdom has it that no product will have any support for any of these algorithms for years — if ever. Of course, popular wisdom is ignoring all Open Source projects that support cryptography (including the Linux kernel) which could add support for any of these tomorrow. Does it really matter if the algorithm is found to be flawed later on, if most of these packages support algorithms known to be flawed today? Wouldn't it be just, oh, geekier to have passwords in Blue Midnight Wish or SANDstorm rather than boring old MD5, even if it makes no practical difference whatsoever?"

Link to Original Source
submission

This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
My mind is a potato field ...