2005-02-17T15:01:43 Tomasz Kojm: > http://www.schneier.com/blog/archives/2005/02/sha1_broken.html
Yup. For new designs, the recommendation I've heard is to go with SHA-256 or greater. Apparently the -256, -384, and -512 aren't solely larger hash sizes, they've also got the algorithm twiddled to try and strengthen it somewhat against the current crop of attacks. They may or may not hold up, but they seem to be the most strongly analyzed competitors at the moment. -Bennett
pgpi6ukSZwBov.pgp
Description: PGP signature
_______________________________________________ http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-devel