[vpn] MD5 vs. SHA

[Christopher Gripp]

As found in "Applied Crypto"

SHA is MD4 with the addition of an expand transformation, an extra round and better avalanche effect
MD5 is MD4 with improved bit hashin, an extra round and better avalanche effect

There are no known cryptographic attacks against SHA.  Because it produces a 160 bit hash, it is more resistant to brute-force attacks (including birthday attacks) than a 128 bit hash function.


Christopher Gripp 
Systems Engineer 
Axcelerant

"To be unhappy over what one lacks is to waste what one already possesses."

> -----Original Message-----
> From: Mike Hancock [mailto:Mike.Hancock at sourcemed.net]
> Sent: Thursday, June 20, 2002 11:55 AM
> To: vpn at securityfocus.com
> Subject: [vpn] MD5 vs. SHA
> 
> 
> Can anyone explain the difference between MD5 and SHA
>  (besides 128 vs 160 bits) or point me to a good reason to 
> use one over
> the other?
> 
> _______________________________
> Mike Hancock
> 
> 
> 
> VPN is sponsored by SecurityFocus.com
> 
> 

VPN is sponsored by SecurityFocus.com