Re: Reducing the security bits for MD5 and SHA1 in TLS

I’d agree it’s major for for SHA1 but not for MD5. Pauli -- Dr Paul Dale | Distinguished Architect | Cryptographic Foundations Phone +61 7 3031 7217 Oracle Australia > On 18 Jun 2020, at 12:20 pm, Tim Hudson wrote: > > Given that this change impacts interoperability in a major way it

Re: Reducing the security bits for MD5 and SHA1 in TLS

Given that this change impacts interoperability in a major way it should be a policy vote of the OMC IMHO. Tim. On Thu, 18 Jun 2020, 5:57 am Kurt Roeckx, wrote: > On Wed, May 27, 2020 at 12:14:13PM +0100, Matt Caswell wrote: > > PR 10787 proposed to reduce the number of security bits for MD5

Re: Reducing the security bits for MD5 and SHA1 in TLS

On Wed, May 27, 2020 at 12:14:13PM +0100, Matt Caswell wrote: > PR 10787 proposed to reduce the number of security bits for MD5 and SHA1 > in TLS (master branch only, i.e. OpenSSL 3.0): > > https://github.com/openssl/openssl/pull/10787 > > This would have the impact of meaning that TLS < 1.2