IETF RFC 4270
[ACTIVE]
Attacks on Cryptographic Hashes in Internet Protocols
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 12
- Abstract
- Recent announcements of better-than-expected collision attacks in popular hash algorithms have caused some people to question whether common Internet protocols need to be changed, and if so, how. This document summarizes the use of hashes in many protocols, discusses how the collision attacks affect and do not affect the protocols, shows how to thwart known attacks on digital certificates, and discusses future directions for protocol designers. This memo provides information for the Internet community.
- Publication Date
- 2005-12-01
- Status Note
- Informational
- DOI
10.17487/RFC4270- Link
- https://doi.org/10.17487/RFC4270
- Author(s)
- Paul E. HoffmanBruce Schneier
- Keyword(s)
- Collision Attacks, Hash Function, IP
Latest version of IETF RFC 4270
Document Versions — IETF RFC 4270
-
▶ IETF RFC 4270 (2005-12-01)THIS DOC [ACTIVE] [LATEST VERSION]
Bibliographic Reference(s)
- NIST FIPS 180-2 [Withdrawn]
- John Kelsey and Bruce Schneier, "Second Preimages on n-bit Hash Functions for Much Less than 2^n Work", November 2004, < http://eprint.iacr.org/2004/304 >. EXTERNAL
- X. Wang, D. Feng, X. Lai, and H. Yu, "Collisions for Hash Functions MD4, MD5, HAVAL-128 and RIPEMD", August 2004, < http://eprint.iacr.org/2004/199 >. EXTERNAL
- Xiaoyun Wang, Yiqun Lisa Yin, and Hongbo Yu, "Collision Search Attacks on SHA1", February 2005, < http://theory.csail.mit.edu/~yiqun/shanote.pdf >. EXTERNAL
- Vlastimil Klima, "Finding MD5 Collisions - a Toy For a Notebook", March 2005, < http://cryptography.hyperlink.cz/ md5/MD5_collisions.pdf >. EXTERNAL
- Arjen Lenstra and Benne de Weger, "On the possibility of constructing meaningful hash collisions for public keys", February 2005, < http://www.win.tue.nl/~bdeweger/ CollidingCertificates/ddl-final.pdf >. EXTERNAL
- IETF RFC 3174 [Active, Amended*]
- IETF RFC 3280 [Superseded*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC4270.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 4270, Attacks on Cryptographic Hashes in Internet Protocols. Available at https://doi.org/10.17487/RFC4270
Snippet:
IETF RFC 4270, Attacks on Cryptographic Hashes in Internet Protocols. Available at https://doi.org/10.17487/RFC4270
HTML (ISO 690 compliant)
Preview:
IETF RFC 4270, Attacks on Cryptographic Hashes in Internet Protocols. Available at https://doi.org/10.17487/RFC4270
Snippet:
<span class="citation"><cite>IETF RFC 4270</cite>, Attacks on Cryptographic Hashes in Internet Protocols. Available at <a href="https://doi.org/10.17487/RFC4270" target="_blank" rel="noopener">https://doi.org/10.17487/RFC4270</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 4270, Attacks on Cryptographic Hashes in Internet Protocols
doi: 10.17487/RFC4270
url: https://doi.org/10.17487/RFC4270
doi: 10.17487/RFC4270
url: https://doi.org/10.17487/RFC4270
Snippet:
<li> <cite id="bib-rfc4270">IETF RFC 4270</cite>, Attacks on Cryptographic Hashes in Internet Protocols <span class="doi">10.17487/RFC4270</span> </li>
Referenced By
- IETF RFC 4945 [Active*]
- IETF RFC 5751 [Superseded*]
- IETF RFC 5997 [Active*]
- IETF RFC 6120 [Active*]
- IETF RFC 6149 [Active*]
- IETF RFC 6151 [Active*]
- IETF RFC 6194 [Active*]
- IETF RFC 6455 [Active*]
- IETF RFC 6929 [Active*]