From owner-freebsd-hackers@FreeBSD.ORG Fri Dec 28 13:03:42 2007 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3348316A417; Fri, 28 Dec 2007 13:03:42 +0000 (UTC) (envelope-from aryeh.friedman@gmail.com) Received: from mta5.srv.hcvlny.cv.net (mta5.srv.hcvlny.cv.net [167.206.4.200]) by mx1.freebsd.org (Postfix) with ESMTP id F1A2B13C4F7; Fri, 28 Dec 2007 13:03:41 +0000 (UTC) (envelope-from aryeh.friedman@gmail.com) Received: from flosoft.no-ip.biz (ool-435559b8.dyn.optonline.net [67.85.89.184]) by mta5.srv.hcvlny.cv.net (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTP id <0JTR00JIHGA4QXW0@mta5.srv.hcvlny.cv.net>; Fri, 28 Dec 2007 08:03:41 -0500 (EST) Received: from flosoft.no-ip.biz (localhost [IPv6:::1]) by flosoft.no-ip.biz (8.14.2/8.14.2) with ESMTP id lBSD3eHv033548; Fri, 28 Dec 2007 08:03:40 -0500 Date: Fri, 28 Dec 2007 08:03:40 -0500 From: "Aryeh M. Friedman" In-reply-to: <9bbcef730712280454w6b6f5e17s33631223d5571f83@mail.gmail.com> To: Ivan Voras Message-id: <4774F42C.5030105@gmail.com> MIME-version: 1.0 Content-type: text/plain; charset=UTF-8 Content-transfer-encoding: 7BIT X-Enigmail-Version: 0.95.5 References: <5950EE0C-383D-4D6B-9991-A0DEABD2ADE4@u.washington.edu> <20071228003716.GB48997@lor.one-eyed-alien.net> <4774EF27.90307@gmail.com> <9bbcef730712280454w6b6f5e17s33631223d5571f83@mail.gmail.com> User-Agent: Thunderbird 2.0.0.9 (X11/20071217) Cc: freebsd-hackers@freebsd.org Subject: Re: BSD license compatible hash algorithm? X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Dec 2007 13:03:42 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Ivan Voras wrote: > On 28/12/2007, Aryeh M. Friedman wrote: > >> All hashs have issues with pooling.... see >> http://www.burtleburtle.net/bob/hash/index.html... > > Here's a more direct link: > http://www.burtleburtle.net/bob/hash/doobs.html > > This one is much better according to > http://en.wikipedia.org/wiki/Hash_table#Choosing_a_good_hash_function > > Matter of fact this weakness is the main avenue of attack on cryptographic hashes see http://eprint.iacr.org/2004/199.pdf A slightly off topic side note NIST is having a contest to attempt to mitigate these issues in "SHA-3" see: http://csrc.nist.gov/groups/ST/hash/sha-3/index.html. Currently there only 4 teams that have expressed interest in entering perhaps this will get more interest. - -- Aryeh M. Friedman FloSoft Systems http://www.flosoft-systems.com Developer, not business, friendly -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHdPQrzIOMjAek4JIRAgd2AJ43fYJ6SkceoLP8kD1wso5mpN1uGwCfaYoC Vgkl6P2riL9JIEK+MKCnd4k= =o/Eb -----END PGP SIGNATURE-----