svn commit: r315148 - stable/10/sbin/md5

Dag-Erling Smørgrav des at FreeBSD.org
Sun Mar 12 13:15:27 UTC 2017


Author: des
Date: Sun Mar 12 13:15:26 2017
New Revision: 315148
URL: https://svnweb.freebsd.org/changeset/base/315148

Log:
  MFH (r314528): update to reflect the state of SHA-1

Modified:
  stable/10/sbin/md5/md5.1
Directory Properties:
  stable/10/   (props changed)

Modified: stable/10/sbin/md5/md5.1
==============================================================================
--- stable/10/sbin/md5/md5.1	Sun Mar 12 13:14:49 2017	(r315147)
+++ stable/10/sbin/md5/md5.1	Sun Mar 12 13:15:26 2017	(r315148)
@@ -67,21 +67,17 @@ in a secure manner before being encrypte
 key under a public-key cryptosystem such as
 .Tn RSA .
 .Pp
+The
 .Tn MD5
-has been completely broken as far as finding collisions is
-concerned, and should not be relied upon to produce unique outputs.
-This also means that
-.Tn MD5
-should not be used as part of a cryptographic signature scheme.
-At the current time (2014-05-17) there is no publicly known method to
-.Dq reverse
-MD5, i.e., to find an input given a hash value.
-.Pp
-.Tn SHA-1
-currently (2014-05-17) has no known collisions, but an attack has been
-found which is faster than a brute-force search, placing the security of
+and
 .Tn SHA-1
-in doubt.
+algorithms have been proven to be vulnerable to practical collision
+attacks and should not be relied upon to produce unique outputs, nor
+should they be used as part of a cryptographic signature scheme.
+As of 2016-03-02, there is no publicly known method to
+.Em reverse
+either algorithm, i.e. to find an input that produces a specific
+output.
 .Pp
 .Tn SHA-512t256
 is a version of
@@ -94,6 +90,8 @@ The hashes are not interchangeable.
 .Pp
 It is recommended that all new applications use
 .Tn SHA-512
+or
+.Tn SKEIN-512
 instead of one of the other hash functions.
 .Pp
 The following options may be used in any combination and must


More information about the svn-src-stable-10 mailing list