LWN.net Logo  Can you cite the sources, please  Can you cite the
sources, please  Posted Dec 17, 2007 22:40 UTC (Mon) by khim
(subscriber, #9252) In reply to: SquirrelMail 1.4.13 released -
older versions compromised by wahern Parent article:
SquirrelMail 1.4.13 released - older versions compromised  The
purpose of a cryptographic hash is that you can make reasonable
declarations about the qualities of the algorithm without
reference or qualification to the structure or content of the
input.  Sorry, but this is piece of bullshit. The main purpose
of cryptographic hash is to guarantee immutability of signed
data in most cases (including distribution case). It's called
Second preimage resistance. And both MD5 and SHA1 are not broken
in sense that second preimage attack is implementable.  What the
hoople is all about then ? MD5 and SHA1 were found not collision
resistant. Yes, there are exist application where this is
requirement. For example you can not use it to prove that you've
sent file A and not file B. Bu