Rivest:
> Thus, while MD6 appears to be a robust and secure cryptographic
> hash algorithm, and has much merit for multi-core processors,
> our inability to provide a proof of security for a
> reduced-round (and possibly tweaked) version of MD6 against
> differential a
At 11:49 PM -0400 7/3/09, Steven M. Bellovin wrote:
>Here's the essential paragraph:
>
> Thus, while MD6 appears to be a robust and secure cryptographic
> hash algorithm, and has much merit for multi-core processors,
> our inability to provide a proof of security for a
> red
