1995-10-31 - Re: Keyed-MD5, ITAR, and HTTP-NG

Header Data

From: “Perry E. Metzger” <perry@piermont.com>
To: hallam@w3.org
Message Hash: 19cc5c074c91d20b672fa4e2f14c1211c35e7fa016f4d52ebfa2a13c55c810fc
Message ID: <199510312331.SAA03949@jekyll.piermont.com>
Reply To: <9510302351.AA28243@zorch.w3.org>
UTC Datetime: 1995-10-31 20:42:06 UTC
Raw Date: Wed, 1 Nov 1995 04:42:06 +0800

Raw message

From: "Perry E. Metzger" <perry@piermont.com>
Date: Wed, 1 Nov 1995 04:42:06 +0800
To: hallam@w3.org
Subject: Re: Keyed-MD5, ITAR, and HTTP-NG
In-Reply-To: <9510302351.AA28243@zorch.w3.org>
Message-ID: <199510312331.SAA03949@jekyll.piermont.com>
MIME-Version: 1.0
Content-Type: text/plain



hallam@w3.org writes:
> 	Do not spec Keyed MD5, it is a complete looser. It is actually weak
> against a number of attacks. There are much better constructs for creating
> a keyed digest. There are much better ways of creating a digest than using
> a hash fuinction as the base.

What??? 

A keyed version of MD5 is the base authentication mechanism in IPSP
and it has been heavily examined by a number of very good
cryptographers.

Perry

Thread

• Return to October 1995

• Return to November 1995

• Return to “Doug Hughes <Doug.Hughes@Eng.Auburn.EDU>”
• Return to “futplex@pseudonym.com (Futplex)”
• Return to “hallam@w3.org”
• Return to “James Black <black@eng.usf.edu>”
• Return to “James Black <black@sunflash.eng.usf.edu>”
• Return to “Kevin L Prigge <klp@gold.tc.umn.edu>”
• Return to “michael shiplett <walrus@ans.net>”
• Return to ““Perry E. Metzger” <perry@piermont.com>”
• Return to “Rich Graves <llurch@networking.stanford.edu>”

• Return to “Simon Spero <ses@tipper.oit.unc.edu>”

• 1995-10-30 (Tue, 31 Oct 1995 02:46:42 +0800) - Keyed-MD5, ITAR, and HTTP-NG - Simon Spero <ses@tipper.oit.unc.edu>
  • 1995-10-30 (Tue, 31 Oct 1995 03:40:01 +0800) - Re: Keyed-MD5, ITAR, and HTTP-NG - James Black <black@sunflash.eng.usf.edu>
    • 1995-10-31 (Tue, 31 Oct 1995 09:14:59 +0800) - Re: Keyed-MD5, ITAR, and HTTP-NG - Doug Hughes <Doug.Hughes@Eng.Auburn.EDU>
      • 1995-10-31 (Tue, 31 Oct 1995 10:17:33 +0800) - Re: Keyed-MD5, ITAR, and HTTP-NG - Rich Graves <llurch@networking.stanford.edu>
        • 1995-10-31 (Tue, 31 Oct 1995 10:30:26 +0800) - Re: Keyed-MD5, ITAR, and HTTP-NG - James Black <black@eng.usf.edu>
      • 1995-10-31 (Tue, 31 Oct 1995 15:05:54 +0800) - Re: Keyed-MD5, ITAR, and HTTP-NG - Kevin L Prigge <klp@gold.tc.umn.edu>
        • 1995-10-31 (Wed, 1 Nov 1995 07:48:45 +0800) - PGP On shared machines (was Re: Keyed-MD5, ITAR, and HTTP-NG) - Simon Spero <ses@tipper.oit.unc.edu>
  • 1995-10-30 (Tue, 31 Oct 1995 05:27:28 +0800) - Re: Keyed-MD5, ITAR, and HTTP-NG - futplex@pseudonym.com (Futplex)
  • 1995-11-02 (Thu, 2 Nov 1995 09:28:57 +0800) - Re: Keyed-MD5, ITAR, and HTTP-NG - hallam@w3.org
    • 1995-10-31 (Tue, 31 Oct 1995 10:21:14 +0800) - Re: Keyed-MD5, ITAR, and HTTP-NG - Simon Spero <ses@tipper.oit.unc.edu>
    • 1995-10-31 (Wed, 1 Nov 1995 02:12:43 +0800) - Re: Keyed-MD5, ITAR, and HTTP-NG - michael shiplett <walrus@ans.net>
    • 1995-10-31 (Wed, 1 Nov 1995 04:42:06 +0800) - Re: Keyed-MD5, ITAR, and HTTP-NG - “Perry E. Metzger” <perry@piermont.com>
      • 1995-10-31 (Wed, 1 Nov 1995 05:45:06 +0800) - Re: Keyed-MD5, ITAR, and HTTP-NG - hallam@w3.org
        • 1995-11-01 (Wed, 1 Nov 1995 22:25:17 +0800) - Re: Keyed-MD5, ITAR, and HTTP-NG - “Perry E. Metzger” <perry@piermont.com>