jd writes "NIST has announced the round 1 candidates for the Cryptographic Hash Algorithm Challenge. Of the 64 who submitted entries, 51 were accepted. Of those, in mere days, one has been definitely broken and three others are believed to have been. At this rate, it won't take the couple of years NIST were reckoning to whittle down the field to just one or two.
(In comparison, the European Union version, NESSIE, recieved just one cryptographic hash function for it's contest. One has to wonder if NIST and the crypto experts are so concerned about being overwhelmed with work for this current contest, why they all but ignored the European effort. A self-inflicted wound might hurt, but it's still self-inflicted.)
Popular wisdom has it that no product will have any support for any of these algorithms for years — if ever. Of course, popular wisdom is ignoring all Open Source projects that support cryptography (including the Linux kernel) which could add support for any of these tomorrow. Does it really matter if the algorithm is found to be flawed later on, if most of these packages support algorithms known to be flawed today? Wouldn't it be just, oh, geekier to have passwords in Blue Midnight Wish or SANDstorm rather than boring old MD5, even if it makes no practical difference whatsoever?" Link to Original Source
This discussion was created for logged-in users only, but now has been archived.
No new comments can be posted.
NIST Cryptographic Hash Contest, round 1 0 Comments More Login /
Get More Comments