OT: MD5 (was: Outgoing section 5.5 and draft-josefsson)

[Frank Ellermann <nobody at xyzzy.claranet.de>]

Simon Josefsson wrote:

> Not everyone wants to print "derived from the RSA Data Security, Inc.
> MD5 Message-Digest Algorithm" in all material mentioning or referencing
> the derived work.  Many people have chosen to not use the RFC 1321 code
> for their MD5 implementations, but to develop their own.

[...]
| /* In version 0.5 I've added the missing RSA credits to the code. */
[...|
| /* MD5 procedures derived from
[...]
|    and the RSA Data Security, Inc. MD5 Message-Digest Algorithm : */
[...]

If that's not good enough they're free to tell me.  It's certainly my
own code, only the algorithm is (no surprise) almost identical.  Some
drafts claim that MD5 is broken, and at the same time argue that SHA-1
is still okay for HMAC - IIRC I saw that in a HOTP draft.

Frank



_______________________________________________
Ipr-wg mailing list
Ipr-wg at ietf.org
https://www1.ietf.org/mailman/listinfo/ipr-wg