Re: MD5 on the AS/400

["Peter Dow" <pcdow@xxxxxxxxx>]

Hi Steve,

Questions at the bottom...


From: Steve Glanstein <mic@aloha.com>
> MD5 is not considered as safe as the more recent Secured Hash-1 which
> generates 160 bytes of hash.
>
> Also, let's say that your program issues a CALL to the MD5 program to
check
> some sort of code. Remember that inside programmers with access to the
> STRDBG command can always trace this call and override the parameters in
> order to find out the information.

1) Wouldn't your caveat regarding inside programmers apply to Secured Hash-1
also?

2) Wouldn't removing all program observability solve the strdbg problem?

Just curious.

Peter Dow
Dow Software Services, Inc.
909 425-0194 voice
909 425-0196 fax



> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
david@midrange.com
> +---


__________________________________________________
Do You Yahoo!?
Talk to your friends online with Yahoo! Messenger.
http://im.yahoo.com
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---