Feeds

Crypto gurus hash out future

At least 300,000 years to go

Internet Security Threat Report 2014

Encryption experts met in Gaithersburg, Maryland, this week to discuss retiring the SHA-1 hashing algorithm and creating a stronger version of the cryptographic workhorse.

Over the past eighteen months, significant breaks of the Secure Hash Algorithm, SHA-1, have left confidence in the crypto algorithm essentially shattered. This week, a Who's Who of encryption experts met to discuss the problem and attempt to chart a course to a stronger hash function. While much of the proposed fixes build on old techniques, some new ideas did come our of the confab, according to a blog of the conference posted by well-known cryptographer Bruce Schneier.

Hash algorithms are mathematical techniques of producing digital fingerprints of files that perform a key function in encryption and digital signatures. A digital fingerprint, or hash, is a small string of numbers that represent a much larger file or document. A digital signature actually validates a document's fingerprint not the document itself, because signing an actual document would be far too processor-intensive.

The threat of a true break in the algorithm is not overwhelming. Cryptographers originally thought that a computer that could perform an attack calculation 1 million times every second would find a collision only once in 38 billion years. In February, the original break found by the researchers consisted of a method that could produce a collision once every 19 million years. A new technique found in August shortened that to once every 300,000 years. There's still some time left.

Copyright © 2005, SecurityFocus

Remote control for virtualized desktops

More from The Register

next story
You really need to do some tech support for Aunty Agnes
Free anti-virus software, expires, stops updating and p0wns the world
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
HACKERS can DELETE SURVEILLANCE DVRS remotely – report
Hikvision devices wide open to hacking, claim securobods
Astro-boffins start opening universe simulation data
Got a supercomputer? Want to simulate a universe? Here you go
State Dept shuts off unclassified email after hack. Classified mail? That's CLASSIFIED
Classified systems 'not affected' - but, is this reconnaissance?
prev story

Whitepapers

Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
How to determine if cloud backup is right for your servers
Two key factors, technical feasibility and TCO economics, that backup and IT operations managers should consider when assessing cloud backup.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Protecting against web application threats using SSL
SSL encryption can protect server‐to‐server communications, client devices, cloud resources, and other endpoints in order to help prevent the risk of data loss and losing customer trust.