| … | |
… | |
| 2 | <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> |
2 | <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> |
| 3 | <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> |
3 | <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> |
| 4 | |
4 | |
| 5 | <head> |
5 | <head> |
| 6 | <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> |
6 | <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> |
| 7 | <meta name="generator" content="Docutils 0.5: http://docutils.sourceforge.net/" /> |
7 | <meta name="generator" content="Docutils 0.6: http://docutils.sourceforge.net/" /> |
| 8 | <title>GLEP 59 -- Manifest2 hash policies and security implications</title> |
8 | <title>GLEP 59 -- Manifest2 hash policies and security implications</title> |
| 9 | <link rel="stylesheet" href="tools/glep.css" type="text/css" /></head> |
9 | <link rel="stylesheet" href="tools/glep.css" type="text/css" /></head> |
| 10 | <body bgcolor="white"> |
10 | <body bgcolor="white"> |
| 11 | <table class="navigation" cellpadding="0" cellspacing="0" |
11 | <table class="navigation" cellpadding="0" cellspacing="0" |
| 12 | width="100%" border="0"> |
12 | width="100%" border="0"> |
| … | |
… | |
| 25 | <tbody valign="top"> |
25 | <tbody valign="top"> |
| 26 | <tr class="field"><th class="field-name">GLEP:</th><td class="field-body">59</td> |
26 | <tr class="field"><th class="field-name">GLEP:</th><td class="field-body">59</td> |
| 27 | </tr> |
27 | </tr> |
| 28 | <tr class="field"><th class="field-name">Title:</th><td class="field-body">Manifest2 hash policies and security implications</td> |
28 | <tr class="field"><th class="field-name">Title:</th><td class="field-body">Manifest2 hash policies and security implications</td> |
| 29 | </tr> |
29 | </tr> |
| 30 | <tr class="field"><th class="field-name">Version:</th><td class="field-body">1.11</td> |
30 | <tr class="field"><th class="field-name">Version:</th><td class="field-body">1.4</td> |
| 31 | </tr> |
31 | </tr> |
| 32 | <tr class="field"><th class="field-name">Last-Modified:</th><td class="field-body"><a class="reference external" href="http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/proj/en/glep/glep-0059.txt?cvsroot=gentoo">2008/07/13 02:23:36</a></td> |
32 | <tr class="field"><th class="field-name">Last-Modified:</th><td class="field-body"><a class="reference external" href="http://www.gentoo.org/cgi-bin/viewcvs.cgi/xml/htdocs/proj/en/glep/glep-0059.txt?cvsroot=gentoo">2010/01/13 03:26:53</a></td> |
| 33 | </tr> |
33 | </tr> |
| 34 | <tr class="field"><th class="field-name">Author:</th><td class="field-body">Robin Hugh Johnson <robbat2 at gentoo.org>,</td> |
34 | <tr class="field"><th class="field-name">Author:</th><td class="field-body">Robin Hugh Johnson <robbat2 at gentoo.org>,</td> |
| 35 | </tr> |
35 | </tr> |
| 36 | <tr class="field"><th class="field-name">Status:</th><td class="field-body">Draft</td> |
36 | <tr class="field"><th class="field-name">Status:</th><td class="field-body">Draft</td> |
| 37 | </tr> |
37 | </tr> |
| … | |
… | |
| 41 | </tr> |
41 | </tr> |
| 42 | <tr class="field"><th class="field-name">Requires:</th><td class="field-body"><a class="reference external" href="http://www.gentoo.org/proj/en/glepglep-0044.html">44</a></td> |
42 | <tr class="field"><th class="field-name">Requires:</th><td class="field-body"><a class="reference external" href="http://www.gentoo.org/proj/en/glepglep-0044.html">44</a></td> |
| 43 | </tr> |
43 | </tr> |
| 44 | <tr class="field"><th class="field-name">Created:</th><td class="field-body">October 2006</td> |
44 | <tr class="field"><th class="field-name">Created:</th><td class="field-body">October 2006</td> |
| 45 | </tr> |
45 | </tr> |
| 46 | <tr class="field"><th class="field-name">Updated:</th><td class="field-body">November 2007, June 2008, July 2008</td> |
46 | <tr class="field"><th class="field-name">Updated:</th><td class="field-body">November 2007, June 2008, July 2008, October 2008, January 2010</td> |
| 47 | </tr> |
47 | </tr> |
| 48 | <tr class="field"><th class="field-name">Updates:</th><td class="field-body">44</td> |
48 | <tr class="field"><th class="field-name">Updates:</th><td class="field-body">44</td> |
|
|
49 | </tr> |
|
|
50 | <tr class="field"><th class="field-name">Post-History:</th><td class="field-body">December 2009</td> |
| 49 | </tr> |
51 | </tr> |
| 50 | </tbody> |
52 | </tbody> |
| 51 | </table> |
53 | </table> |
| 52 | <hr /> |
54 | <hr /> |
| 53 | <div class="contents topic" id="contents"> |
55 | <div class="contents topic" id="contents"> |
| … | |
… | |
| 184 | <a class="reference external" href="http://crypto.stanford.edu/~dabo/abstracts/hashing.html">http://crypto.stanford.edu/~dabo/abstracts/hashing.html</a></dd> |
186 | <a class="reference external" href="http://crypto.stanford.edu/~dabo/abstracts/hashing.html">http://crypto.stanford.edu/~dabo/abstracts/hashing.html</a></dd> |
| 185 | <dt>[H04] Hawkes, P. and Paddon, M. and Rose, G. (2004). "On Corrective</dt> |
187 | <dt>[H04] Hawkes, P. and Paddon, M. and Rose, G. (2004). "On Corrective</dt> |
| 186 | <dd>Patterns for the SHA-2 Family". CRYPTO 2004 Cryptology ePrint Archive, |
188 | <dd>Patterns for the SHA-2 Family". CRYPTO 2004 Cryptology ePrint Archive, |
| 187 | Report 2004/204. Available online from: |
189 | Report 2004/204. Available online from: |
| 188 | <a class="reference external" href="http://eprint.iacr.org/2004/207.pdf">http://eprint.iacr.org/2004/207.pdf</a></dd> |
190 | <a class="reference external" href="http://eprint.iacr.org/2004/207.pdf">http://eprint.iacr.org/2004/207.pdf</a></dd> |
| 189 | <dt>[J04] Joux, Antoie. (2004). "Multicollisions in Iterated Hash Functions</dt> |
191 | <dt>[J04] Joux, Antoie. (2004). "Multicollisions in Iterated Hash</dt> |
| 190 | <dd><ul class="first simple"> |
|
|
| 191 | <li>Application to Cascaded Constructions;" Proceedings of CRYPTO 2004,</li> |
192 | <dd>Functions - Application to Cascaded Constructions;" Proceedings of |
| 192 | </ul> |
193 | CRYPTO 2004, Franklin, M. (Ed); Lecture Notes in Computer Science |
| 193 | <div class="system-message"> |
|
|
| 194 | <p class="system-message-title">System Message: WARNING/2 (<tt class="docutils">glep-0059.txt</tt>, line 139)</p> |
|
|
| 195 | Bullet list ends without a blank line; unexpected unindent.</div> |
|
|
| 196 | <p class="last">Franklin, M. (Ed); Lecture Notes in Computer Science 3152, pp. |
|
|
| 197 | 306-316. Available online from: |
194 | 3152, pp. 306-316. Available online from: |
| 198 | <a class="reference external" href="http://web.cecs.pdx.edu/~teshrim/spring06/papers/general-attacks/multi-joux.pdf">http://web.cecs.pdx.edu/~teshrim/spring06/papers/general-attacks/multi-joux.pdf</a></p> |
195 | <a class="reference external" href="http://web.cecs.pdx.edu/~teshrim/spring06/papers/general-attacks/multi-joux.pdf">http://web.cecs.pdx.edu/~teshrim/spring06/papers/general-attacks/multi-joux.pdf</a></dd> |
| 199 | </dd> |
|
|
| 200 | <dt>[K06a] Klima, V. (2006). "Tunnels in Hash Functions: MD5 Collisions</dt> |
196 | <dt>[K06a] Klima, V. (2006). "Tunnels in Hash Functions: MD5 Collisions</dt> |
| 201 | <dd>Within a Minute". Cryptology ePrint Archive, Report 2006/105. |
197 | <dd>Within a Minute". Cryptology ePrint Archive, Report 2006/105. |
| 202 | Available online from: <a class="reference external" href="http://eprint.iacr.org/2006/105.pdf">http://eprint.iacr.org/2006/105.pdf</a></dd> |
198 | Available online from: <a class="reference external" href="http://eprint.iacr.org/2006/105.pdf">http://eprint.iacr.org/2006/105.pdf</a></dd> |
| 203 | <dt>[K06b] Klima, V. (2006). "Note and links to high-speed MD5 collision</dt> |
199 | <dt>[K06b] Klima, V. (2006). "Note and links to high-speed MD5 collision</dt> |
| 204 | <dd>proof of concept tools". Available online from: |
200 | <dd>proof of concept tools". Available online from: |
| … | |
… | |
| 230 | </dd> |
226 | </dd> |
| 231 | </dl> |
227 | </dl> |
| 232 | </div> |
228 | </div> |
| 233 | <div class="section" id="copyright"> |
229 | <div class="section" id="copyright"> |
| 234 | <h1><a class="toc-backref" href="#id12">Copyright</a></h1> |
230 | <h1><a class="toc-backref" href="#id12">Copyright</a></h1> |
| 235 | <p>Copyright (c) 2006 by Robin Hugh Johnson. This material may be |
231 | <p>Copyright (c) 2006-2010 by Robin Hugh Johnson. This material may be |
| 236 | distributed only subject to the terms and conditions set forth in the |
232 | distributed only subject to the terms and conditions set forth in the |
| 237 | Open Publication License, v1.0.</p> |
233 | Open Publication License, v1.0.</p> |
| 238 | <p>vim: tw=72 ts=2 expandtab:</p> |
234 | <p>vim: tw=72 ts=2 expandtab:</p> |
| 239 | </div> |
235 | </div> |
| 240 | |
236 | |
| 241 | </div> |
237 | </div> |
| 242 | <div class="footer"> |
238 | <div class="footer"> |
| 243 | <hr class="footer" /> |
239 | <hr class="footer" /> |
| 244 | <a class="reference external" href="glep-0059.txt">View document source</a>. |
240 | <a class="reference external" href="glep-0059.txt">View document source</a>. |
| 245 | Generated on: 2008-10-21 23:29 UTC. |
241 | Generated on: 2010-01-13 03:27 UTC. |
| 246 | Generated by <a class="reference external" href="http://docutils.sourceforge.net/">Docutils</a> from <a class="reference external" href="http://docutils.sourceforge.net/rst.html">reStructuredText</a> source. |
242 | Generated by <a class="reference external" href="http://docutils.sourceforge.net/">Docutils</a> from <a class="reference external" href="http://docutils.sourceforge.net/rst.html">reStructuredText</a> source. |
| 247 | |
243 | |
| 248 | </div> |
244 | </div> |
| 249 | </body> |
245 | </body> |
| 250 | </html> |
246 | </html> |