Re: RE; 192-bit signatures

2006-02-07 Thread Kyle Hamilton
TLS uses an XOR of an MD5 over the first 128 bits, and then an unmodified remaining 32 bits for SHA-1. However, please note that a successful attack against TLS would require the ability to generate a plaintext that would make both the MD5 and the SHA1 come out to the same value. -Kyle H On 2/7/

Re: RE; 192-bit signatures

2006-02-07 Thread Alain Damiral
Out of pure curiosity - I have recently been told that all existing/used protocols had been designed without taking into account the eventual need to adapt to new hash lengths. How true is that ? It seems to be a topic of concern for some people since all commonly used hashes have been broken

Re: RE; 192-bit signatures

2006-02-07 Thread Jason Resch
Bob Mearns wrote: >> I'm looking to generate a short digital signature, perhaps 192 >> bits or so, using an asymmetrical algorithm. DSA seems to >> have 320 bit signatures regardless of the key size used. Is >> this really the case, or am I missing something? Ignoring for >> the moment the wi

Re: RE; 192-bit signatures

2006-02-07 Thread Victor Duchovni
On Tue, Feb 07, 2006 at 10:39:01AM -0800, Bob Mearns wrote: > I appreciate that the security of such a short signature is paltry. > In my application, the signature length (keeping it short) is as > important as the security (odd as that may seem). I've not found > a way to generate signatures as

Re: RE; 192-bit signatures

2006-02-07 Thread Dr. Stephen Henson
On Tue, Feb 07, 2006, Bob Mearns wrote: > > I appreciate that the security of such a short signature is paltry. > In my application, the signature length (keeping it short) is as > important as the security (odd as that may seem). I've not found > a way to generate signatures as short as I'd lik