diff options
author | Todd C. Miller <millert@cvs.openbsd.org> | 2004-08-24 19:38:18 +0000 |
---|---|---|
committer | Todd C. Miller <millert@cvs.openbsd.org> | 2004-08-24 19:38:18 +0000 |
commit | 12590e9087dd3c2274acb85fb38b64a82b8ffc15 (patch) | |
tree | 96f937b910605c443ebe567c9eb7882237ac1218 | |
parent | 3f33314f11e359bc03e8654ab2dcb9feadf7bdc1 (diff) |
Collisions have been found for the full versions of MD4, MD5 and RMD160.
-rw-r--r-- | lib/libc/hash/mdX.3 | 11 | ||||
-rw-r--r-- | lib/libc/hash/rmd160.3 | 9 |
2 files changed, 15 insertions, 5 deletions
diff --git a/lib/libc/hash/mdX.3 b/lib/libc/hash/mdX.3 index d43aeeb6943..edf2275cc15 100644 --- a/lib/libc/hash/mdX.3 +++ b/lib/libc/hash/mdX.3 @@ -6,7 +6,7 @@ .\" this stuff is worth it, you can buy me a beer in return. Poul-Henning Kamp .\" ---------------------------------------------------------------------------- .\" -.\" $OpenBSD: mdX.3,v 1.7 2004/06/22 01:57:29 jfb Exp $ +.\" $OpenBSD: mdX.3,v 1.8 2004/08/24 19:38:17 millert Exp $ .\" .Dd April 29, 2004 .Dt MDX 3 @@ -208,6 +208,9 @@ and .Fn MDXData helper functions are derived from code written by Poul-Henning Kamp. .Sh BUGS -Hans Dobbertin has shown collisions for the full version of MD4 and -found a collision in the compress function of MD5. -The use of SHA or RIPEMD-160 is recommended instead. +Collisions have been found for the full versions of both MD4 and MD5. +The use of +.Xr sha1 3 +or +.Xr sha2 3 +is recommended instead. diff --git a/lib/libc/hash/rmd160.3 b/lib/libc/hash/rmd160.3 index fad7ba6f18b..72fe3b0a2bb 100644 --- a/lib/libc/hash/rmd160.3 +++ b/lib/libc/hash/rmd160.3 @@ -1,4 +1,4 @@ -.\" $OpenBSD: rmd160.3,v 1.26 2004/06/22 01:57:29 jfb Exp $ +.\" $OpenBSD: rmd160.3,v 1.27 2004/08/24 19:38:17 millert Exp $ .\" .\" Copyright (c) 1997, 2004 Todd C. Miller <Todd.Miller@courtesan.com> .\" @@ -238,3 +238,10 @@ If a message digest is to be copied to a multi-byte type (ie: an array of five 32-bit integers) it will be necessary to perform byte swapping on little endian machines such as the i386, alpha, and vax. +.Sh BUGS +Collisions have been found for the full version of RMD-160. +The use of +.Xr sha1 3 +or +.Xr sha2 3 +is recommended instead. |