The problem with government forecasts...

NIST security technology group manager William Burr quoted in Federal Computer Week, February 7, 2005:

But Burr said no complete implementation of the SHA-1 function has been successfully attacked. 'SHA-1 is not broken,' he said, 'and there is not much reason to suspect that it will be soon.'

Bruce Schneier in his blog, February 15, 2005 (8 days later):

SHA-1 has been broken. Not a reduced-round version. Not a simplified version. The real thing. The research team of Xiaoyun Wang, Yiqun Lisa Yin, and Hongbo Yu (mostly from Shandong University in China) have been quietly circulating a paper... [see schneier's blog for details]

Technorati Tags: sha1, hashes, crypto, trust, government

«»