summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTodd C. Miller <millert@cvs.openbsd.org>2004-08-24 19:38:18 +0000
committerTodd C. Miller <millert@cvs.openbsd.org>2004-08-24 19:38:18 +0000
commit12590e9087dd3c2274acb85fb38b64a82b8ffc15 (patch)
tree96f937b910605c443ebe567c9eb7882237ac1218
parent3f33314f11e359bc03e8654ab2dcb9feadf7bdc1 (diff)
Collisions have been found for the full versions of MD4, MD5 and RMD160.
-rw-r--r--lib/libc/hash/mdX.311
-rw-r--r--lib/libc/hash/rmd160.39
2 files changed, 15 insertions, 5 deletions
diff --git a/lib/libc/hash/mdX.3 b/lib/libc/hash/mdX.3
index d43aeeb6943..edf2275cc15 100644
--- a/lib/libc/hash/mdX.3
+++ b/lib/libc/hash/mdX.3
@@ -6,7 +6,7 @@
.\" this stuff is worth it, you can buy me a beer in return. Poul-Henning Kamp
.\" ----------------------------------------------------------------------------
.\"
-.\" $OpenBSD: mdX.3,v 1.7 2004/06/22 01:57:29 jfb Exp $
+.\" $OpenBSD: mdX.3,v 1.8 2004/08/24 19:38:17 millert Exp $
.\"
.Dd April 29, 2004
.Dt MDX 3
@@ -208,6 +208,9 @@ and
.Fn MDXData
helper functions are derived from code written by Poul-Henning Kamp.
.Sh BUGS
-Hans Dobbertin has shown collisions for the full version of MD4 and
-found a collision in the compress function of MD5.
-The use of SHA or RIPEMD-160 is recommended instead.
+Collisions have been found for the full versions of both MD4 and MD5.
+The use of
+.Xr sha1 3
+or
+.Xr sha2 3
+is recommended instead.
diff --git a/lib/libc/hash/rmd160.3 b/lib/libc/hash/rmd160.3
index fad7ba6f18b..72fe3b0a2bb 100644
--- a/lib/libc/hash/rmd160.3
+++ b/lib/libc/hash/rmd160.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: rmd160.3,v 1.26 2004/06/22 01:57:29 jfb Exp $
+.\" $OpenBSD: rmd160.3,v 1.27 2004/08/24 19:38:17 millert Exp $
.\"
.\" Copyright (c) 1997, 2004 Todd C. Miller <Todd.Miller@courtesan.com>
.\"
@@ -238,3 +238,10 @@ If a message digest is to be copied to a multi-byte type (ie:
an array of five 32-bit integers) it will be necessary to
perform byte swapping on little endian machines such as the i386, alpha,
and vax.
+.Sh BUGS
+Collisions have been found for the full version of RMD-160.
+The use of
+.Xr sha1 3
+or
+.Xr sha2 3
+is recommended instead.