YOUR IT - Technology for you

No. 1 Story

Telstra adds one million mobile services, but Sensis plummets

Telstra has revealed the addition of almost one million new mobile services in the six months to December 2011, but Sensis revenues plummeted 24 percent in 12 months.

read more

More From

The Latest MD5 Attack - The Sky Continues to Fall

Your IT - Home IT

Anyone with a voice on this topic has been saying for some time that MD5 is broken and that CAs should move to SHA-1.  As I said on the previous page, all but 6 of the root CAs have taken this advice; those six are aware of the issue.

The problem is that SHA-1 is also rather suspect.

Obviously, SHA-1 isn’t as broken as MD5, but experts in the field have recommended for some time that it should not be used beyond 2010.  To this end NIST has sponsored a competition to select a new algorithm which will become SHA-3.  The competition closed on October 31 2008 and a total of 64 entries were received of which 51 were assessed as meeting the initial criteria.  A final decision is expected in 2012.

Right now, there is nothing agreed to move forward in the short term.  Although Bruce Schneier, quoted elsewhere noted that this entire point is rather moot as users (and browsers) rarely check the validity of certificates in any situation.

Loading comments ...



- sponsored feature -

The Death of Traditional BI: What’s Next?

How to Make Business Discovery Work for Your Business IP PABX BUYING GUIDE

Business Discovery takes its cues from consumer apps. Like Google, it encourages us- ers to hunt for and explore data without worrying about or even noticing the underly- ing technology. Their entire experience is working within an intuitive interface to get real-time, self-service results with only minimal training. ...more