Slashdot Mirror
NIST Opens Competition for a New Hash Algorithm
Invisible Pink Unicorn writes "The National Institute of Standards and Technology has opened a public competition for the development of a new cryptographic hash algorithm, which will be called Secure Hash Algorithm-3 (SHA-3), and will augment the current algorithms specified in the Federal Information Processing Standard (FIPS) 180-2. This is in response to serious attacks reported in recent years against cryptographic hash algorithms, including SHA-1, and because SHA-1 and the SHA-2 family share a similar design. Submissions are being accepted through October 2008, and the competition timeline indicates that a winner will be announced in 2012."
i prefer the bubble bag method for making hash
Somebody care to help me figure out this sentence phragment?
"This is in response to serious attacks reported in recent years against cryptographic hash algorithms, including SHA-1, and because SHA-1 and the SHA-2 family share a similar design."
Now, if you'll excuse me, I have backups to corrupt.
I know I'm being paranoid, but did anybody else think that this is a way for the gummint to get a look at the various methods people are using to secure their data? What better way to get the methods than to have a 'competition', something that will stroke the egos of crackers?
Best regards.
INGREDIENTS:
* 2 to 3 tablespoons butter
* 2 cups cooked corned beef, finely chopped
* 3 cups cooked, chopped potatoes
* 2 tablespoons minced onion
* 2 tablespoons chopped parsley, optional
* salt, pepper and brown gravy
PREPARATION:
Melt butter in a large skillet over medium-low heat. Add corned beef, potatoes, and minced onion; spread evenly in the skillet. Brown on one side; turn with a spatula and brown the other side. Continue turning until most of the meat and potatoes are well-browned.
I know SHA0 and SHA1 are broken but SHA2? I thought they're still secure to use, especially the SHA2-512. What I am missing?
Why does the government promote creating new encryption methods when encrypting data so clearly means you have something to hide and are therefore guilty? I mean COME ON!
I got a catholic block.
Once I develope the winning uber hash function, what do I get? I can't find in the timeline where it mentions a large cash prize with strippers jumping out of cake. Some balloons too.
Where is the link in the story to this part? Anyone?
Take the cheese to sickbay, the doctor should see it as soon as possible - B'Elanna Torres, "Learning Curve"
This is
in response to serious attacks reported in recent years against cryptographic hash algorithms, including SHA-1
and
because SHA-1 and the SHA-2 family share a similar design.
You won't catch me defending this abomination of a sentence, but that's how I'd parse such a thing.
I have seen the future, and it is inconvenient.
Jung qb V jva?
What would happen if you wrote a program to randomly create algorithms? Most of them would be rubbish, but occasionally you'd hit gold. It must be possible for computers to create formulas that "add up" - i.e. that work?
Get your own free personal location tracker
Encryption implies that you can reconstruct the original string from the encoded. Methods like md5, sha1, etc are one way algorithms that cannot be reversed* in a realistic amount of time.
* - Rainbow tables
Wah Sig!
Democratic version: Note, I'm l[L]ibertarian, and find the humor in parent post.
1. Declare war on Social Ill Y with a bogus slogan "_______ Crisis"
2. Announce increase in taxes and/or entitlement spending
3. Repeat 2 as often as necessary for the domestic brain dead.
4. Use to increase political power locally and abroad by showing how "enlightened" you are.
5. Profit!
6. We all lose.
Cheers,
Hillary Roddam C.
Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
http://xkcd.com/257/
All right, the first to make a rot13 joke is going straight to hell.
It should probably be based on http://en.wikipedia.org/wiki/Elliptic_curve_cryptography . Unless they want something that only they can break. :O
"Time is nothing; timing is everything."
Crude hash:
Take a full stalk from the marijuana plant--bud, leaves, and all. Strip the bud and the leaves away from the bulk fiber stem. Discard the stem. Roll and crush the bud and leaves together. Compress, twist, and tear. Compress, twist, and tear. Wring the water out of the bulk pulp. Leave the bulk pulp to demoisturize (not dry completely). This is the crudest form of hash and probably the oldest form known to man.
Leftover hash:
Take just the leaves from the marijuana plant. Repeat the process described for crude hash. Use the marijuana buds for normal smoking or cooking. This method allows one to make use of the leaves as well as the bud in separate form.
Crude chemical extract:
Take the buds from the marijuana plant. Break them apart but do not crush or damage the glands (trichomes). Place the broken up buds in ice water, swirl and mix, and scoop out the material which rises to the top. Dry gently (air dry, no heat).
Supercritical chemical extract:
Take the buds from the marijuana plant. Break them apart but do not crush or damage the glands (trichomes). Pack the material into a sealed cylinder. Attach a tube of compressed butane to the sealed cylinder. Discharge the butane through the sealed cylinder. Collect the effluent and allow the butane to evaporate (air dry, no heat).
Sohxlet extract (honey blond hash oil):
Obtain a sohxlet extraction apparatus. Use the buds, possibly the leaves, maybe even the stems from the plant. Extract for at least five cycles using pentane, hexane, or heptane. Collect and dry the extraction solution (air dry, preferably with attached vacuum, as little heat as possible). This is the finest hash oil you'll come across.
In all cases avoid temperatures over 50C. The desireable components, technically, boil around 110-120C but significant amounts may be lost at temperatures over 50C.
ENJOY!
The point of making hash is to denature the typical plant products, such as chlorophyll, and extract them into a water layer (which is removed) or to extract the desireable hydrophobic products away from the bulk plant material. Smoking untreated or uncured marijuana plant material is somewhat flavorful (depending upon personal taste) but usually causes a digestive or nervous reaction (tummyache or headache).
the NPG electrode was replaced with carbon blac
I put a SHA-1 based KDF in 802.16 because NIST SP800-56 told me to.
Argh.
Evil people are out to get you.
With hash values getting longer and longer, wouldn't it be more economic to just use Identity as the hashing function?
Here's your grain of salt...
Fight hunger. Filet a politician and send him to a 3rd world country of your choice.
As you've admitted to being a libertarian, I suppose I should make one for you, too:
1. Declare war on Big Government with bogus slogan "Let the free market fix __________"
2. Announce plans to decrease funding to social programs
3. Figure out that you have no one in any elected office in any country anywhere who can carry out 2.
4. Announce that someone who has never professed to be a libertarian but holds a few libertarian ideals, is in fact a libertarian. Do the same for historical figures, especially anarchists.
5. Make up bogus arguments about the magical free market that will never be put to any sort of test, due to 3., above.
6. Parrot back tired arguments that were disproved hundreds of years ago, back in the days of lassez-faire. Conveniently forget about child labor, horrid working conditions, rampant pollution, institutionalized racism, debt slavery, and any other facts that show unregulated free market capitalism destroys lives.
7. Cherry pick examples of deregulation and privatization, ignoring any cases that prove libertarian methods wrong.
8. Try to convince other libertarians to all move to the same state so you can remedy point 2.
9. Realize that convincing self-centered libertarians to do anything is like trying to herd cats.
10. The rest of us grow bored with your childish, self involved, "Nyah nyah, you're not the boss of me!" political stance and ignore you, as libertarians have never managed to do anything more than talk.
Wait, that's not funny, it's just sad.
- None can love freedom heartily, but good men; the rest love not freedom, but license. -- John Milton
There is such a thing as a one-way encryption and hashing is a form of doing so. By definition encryption is the act of writing something in an alternative manner. There's no requirement it be decryptable (or secure, for that matter).
That's why you'll see even the authors of cryptosystems that lost to AES recommending AES. In some cases, the losers are theoretically more secure. However what they are not is more tested. AES is probably the most tested cryptosystem next to DES. As such, people are pretty sure there aren't any lurking holes.
Also done by NIST. I suppose you could be all paranoid and claim that AES was chosen so the that US government could snoop on you since, after all, the NSA signed off on it as being secure and they'd never tell the truth, right? Well, except for the fact that it was designed by a couple of Belgians and has also been signed off on by essentially every other respected crypto expert and organization there is.
So that leaves you with two possible situations:
1) That the NSA is so amazingly far ahead of everyone else in crypto that they were able to find something in AES that no one else has in over a decade. Also they are so confident in their knowledge that they believe nobody else will find it since if they did the results would be a big problem (AES is approved for classified data, and is used by US financial institutions).
or
2) AES is really secure, and the NSA is telling the truth.
Now which is more likely? Also, supposing you believe option #1 then why trust any crypto? If the NSA really is so good that they can outdo the entire rest of the crypto community, well then they can probably break pretty much any of the cryptosystems out there. You can't trust any of them since the only people who would really know if they were insecure won't say.
Seems extremely unlikely.
Well, same deal with this hash competition. If you believe that the government will be able to pick one that is in fact something they can break, but that nobody else in the world will know about this then it doesn't matter, because their understanding is so far advanced that all hashes would have to be suspect.
Given the extremely public, international, nature of things like this there really isn't any room for mistrust. I again point to the results of the AES competition. You want to talk about a cypher that has stood up to some extreme scrutiny, there you go.
part of the reason for the long delay is to allow the CIA and NSA to evaluate all contenders for suitability of being crackable/backdoorable by them.
> This is in response to serious attacks reported in recent years against cryptographic ...to follow in early 2013 with a competition to develop SHA-4.
> hash algorithms, including SHA-1, and because SHA-1 and the SHA-2 family share a
> similar design. Submissions are being accepted through October 2008, and the competition timeline
> indicates that a winner will be announced in 2012
(-1: Post disagrees with my already-settled worldview) is not a valid mod option.
See http://en.wikipedia.org/wiki/WHIRLPOOL
So, what requirements should a submission fulfill? I can't find them!
Swedish plasma phys. PhD student; MSc EE; knows maths, programming, electronics; finance interest; seeks opportunities
First off, Touche. I love a good ribbing ... :-D
1) Never been tried.
2) What's wrong with this?
3) Sad, isn't it?
4) Huh?
5) Again haven't been tried in a while
6) I actually believe GVMT Roll in some of these things
7) No Cherry Picking here
8) Whatever
9) Whatever
10) Too many people being (D) or (R) because of Fear and Fear.
Lets just deal with #1
Free Markets are easy to control. Corporate Charters are given by the GVMT, why aren't they revoked more often? Why aren't assets seized? Why aren't boards of directors arrested and charged for lack of proper stewardship?
Much of the problems seen in the free market isn't the fault of free markets. It is the fault of interference when it isn't needed, and non-interference when it is needed. Indeed, there hasn't really been a "free market" in 150 years or so. Closest we have right now is the Internet, and with Congress getting involved it's only going to ruin it.
We don't need more laws, we need more responsibility.
Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
This reminds me of an altogether disturbing (yet somehow hilarious) hash recipe that recently came into the public eye - butthash - yeah you heard right. Butthash.
This is what entropy is for.
Why add to the ambiguity? We already have SHA-1 (160 bits) and the SHA-2 family. A lot of people think that SHA-2 refers to just SHA-256, even though there is also a SHA-224. The SHA-2 family also includes SHA-384 and SHA-512. So now we will have this SHA-3, which will be confused with SHA-384 from the SHA-2 family. Why keep the SHA- prefix?
The typewriter cabal.
Mea navis aericumbens anguillis abundat
Oh, I see. You're a smart libertarian who can take a joke. Even rarer than a Unicorn. ;-)
- None can love freedom heartily, but good men; the rest love not freedom, but license. -- John Milton
I'll I got to say is...
SHA right!
The timeline which is being linked to starts in 2006. But it is still not too late to get started developing a new algorithm, the submission deadline is a year from now. I guess people with the required skills have probably known about it for a while though, so anybody who intend to submit something is probably already working on it.
Do you care about the security of your wireless mouse?
http://web.archive.org/web/20051220092744/csrc.nist.gov/publications/drafts/SP800-56_7-5-05.pdf
Nice try, but this exact paragraph was in the draft version of SP800-56 as well...
Swing and a miss...
I have a patent.
cpeterso
After reading about the MD5 and SHA vulnerabilities, I've been looking to Tiger as a hash algorithm. Anyone else have experience with it?
:)
Let the "You should really check out the new Leopard algorithm" jokes fly..
ctrl+f "$" Not interested.
Help Me! I'm trapped in the tubes! Oh noes! Here comes a internet!
And there's evidence that the NSA understood quite a bit more about cryptography back in the DES days based on a change they made ot it that hardened it against an as of yet unknown kind of attack.
However being a bit ahead in terms of creating a system is real different form being far enough ahead to break systems. To mistrust the NSA on AES means you figure that they know enough to know how to break it, and that they figure the knowledge is so far advanced that no one else will figure it out. One of the NSA's jobs is actually "To achieve information assurance for information infrastructures critical to U.S. national security interests." They are tasked with things like making sure that US financial systems aren't broken in to, hence things like DES/AES. As such if they knowingly allowed a breakable cryptosystem to become the standard and it was in fact broken, they'd have failed in that and have shit to answer for.
So while I certainly believe they are the best in the business, and while I'd not be surprised to discover they know things that public does not, it would imply a staggering advance in cryptography for them to be able to break AES and figure that the public can't. In fact, it would probably imply something along the Tom Clancy lines of a computer that could break ANY machine based cypher and as such no matter what crypto you used short of a one time pad, you'd be screwed.
I just don't find it reasonable to believe that. I find it more reasonable to believe that since good crypto is out there anyhow, and since their job is to protect US interests, that they did an honest analysis of AES and found it to be highly secure, just as everyone else did.
How about we just add more bits ? :P
(no, I'm not serious!)
In the many years since I've been writing code (and I started on an Atari 400!), I've always sided with caution when dealing with outside-interfacing code. CRC-16 was easy to smash, then CRC-32 lasted just a teeny bit longer, then MD5 collisions, and now SHA-1/2. The one thing about computing power is that it is constantly growing; the hash that protects you today will be a script kiddie's joke tomorrow.
There is one thing that can throw them for a loop: combinations. It's a heck of a lot harder to reverse three interlocked hashes... you might be able to fudge one, but the other one (or two, three, ten) will trip. It also spreads the risk of weaknesses in the individual algorithms.
Now I'm not negating the need for a better hash, but there are very functional things we can do in the meantime to cover our asses.
-Billco, Fnarg.com
The linked NIST report mentions only the work of Prof. Yang with which no one has yet found a collision, but a team from Graz University of Technology (Austria) has proposed a significantly faster algorithm for producing SHA-1 collisions and is running a BOINC project to find one.
-- Insert witty one-liner here. --
I make this suggestion on Slashdot every so often. If you think that free markets are so great, and government is so bad, then why don't you go to a place where there is no government interference and you can buy and sell anything: the tribal areas in Pakistan, or the non-government controlled areas of Sudan or Ethiopia. There are places in Iraq where the government is absent. Also there is an area in South America, in north western Brazil, where anarchy reigns. Go to one of those places.
Every place without government control is a hell hole where violence runs amok, there is no commerce and death and destruction rule. This is as true now as it has been in history. You sit in your house or office protected by the police, law, courts, fire and emergency services and then you whine about how the government and the rule of law are oppressing you. I just wish that there was some way to give the right wing morons a taste of real anarchy, and watch the few who survive crawl back and beg to be allowed back into civilization. You are disgusting.
It's true I tell you, feller at work's next door neighbour read it in the paper.
They never were formatted with two spaces, or at least never should have been. Most browsers automatically reduce two spaces to one in any case.
With a proportinal-width font, you are supposed to use one space after a period (sometimes auto-kerned to 1.5 spaces in higher-end software). With a mono-spaced font, you use two spaces. I used to run the IT shop at a newspaper, and I was quickly elnightened that "single space after full stop" was the way things have always been done by everyone in the publishing industry, going back to the days of mechanical type in the 1800s. Why? Because it looks better on the page.
This seems to support my experience. As most web fonts are proportional-width, a single space after period would seem to be the correct usage.
There are already good hash functions out there that don't share the basic design of SHA. I've been using whirlpool for applications where security is important. (Good old md5 is fine for applications that don't involve security.) The problem is getting these newer hash functions widely implemented. For instance, here is my request to get the perl Digest::Whirlpool module packaged for debian/ubuntu. Until better hashes are conveniently packaged, authors of applications actually have a disincentive to move to more secure hash functions.
Find free books.
Just get 1000 monkeys and 1000 numeric keypads. Where's my prize?
Recently I was asked to provide some info about the quality of a PRNG generator used in one of our programs.
One of the questions was how well it does on the NIST Statistical Test Suite.
So, I head over to the NIST site and download the latest version for Windows, dated March 22, 2005.
First thing that I notice is that it does not compile under Visual Studio 2005.
OK, I understand, they only had about two and a half years to fix this which is obviously not enough for an organization of their size and with their budget. Never mind, let's see what I can do.
Add some missing #include statements, comment out a test function that passes a string instead of a pointer to structure, fix some implicit ints, add some casts to remove ambiguity in calling math functions and everything seems in order.
Or is it?
It crashes on every run. Debugging time...
The code looks like a horrible mix of MFC C++ and C written by a FORTRAN programmer doing an assignment for the dailyWTF.
Gems like followed by Zero termination anyone? Nah... Let's overflow the buffer for real! Or how about followed by when generatorDir[option] is hardcoded to be "AlgorithmTesting"? Try counting the characters.
Or this allocation and the following access Remember boys and girls, C arrays are zero based.
Amazing!
NIST proudly proclaims that "This software was developed at the National Institute of Standards and Technology by employees of the Federal Government in the course of their official duties".
At least they have the decency to add that "NIST assumes no responsibility whatsoever for its use by other parties, and makes no guarantees, expressed or implied, about its quality, reliability, or any other characteristic."