[ossec-dev] [Bug 52] Proposal to use a hash more secure

[ossec-bugzilla@xxxxxxxxxxxxxxxxxxxxxxxxxxx]

http://www.ossec.net/bugs/show_bug.cgi?id=52





------- Comment #6 from jonas.esp@xxxxxxxxxxxxxx  2007-08-17 07:29 -------
I found a great library for hash, Mhash [1]

And after of looking the next page [2] about known attacks and theorical breaks
to hash algorithms, I would use:

* RIPEMD-160 (but it isn't implemented on this library)
* SHA-2 -SHA-224, SHA-256, SHA-384, SHA-512- (use any of these if you trust on
the NSA :P)
* WHIRLPOOL (without doubt the best option but the digest size is of 512)


[1] http://mhash.sourceforge.net/
[2] http://paginas.terra.com.br/informatica/paulobarreto/hflounge.html


-- 
Configure bugmail: http://www.ossec.net/bugs/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.