Re: New results against SHA-1

Daniel Kahn Gillmor <dkg(_at_)fifthhorseman(_dot_)net> writes:

> What do other folks think?
Given that the MDC is a hash of plaintext that's then encrypted, and the hash 
value is itself encrypted, I'm not losing any sleep over it.  The hash attacks 
so far have required bit-for-bit carefully-chosen plaintext with known hash 
values, not unknown (or even partially-known) plaintext with an unknown hash 
value.

Peter.