RFC 4270: Attacks on Cryptographic Hashes in Internet Protocols

Recent announcements of better-than-expected collision attacks in popular hash algorithms have caused some people to question whether common Internet…

Read RFC 4270 on the RFC Editor

Incoming relationships (19 related RFCs)

Normatively referenced by — RFC 6194: Security Considerations for the SHA-0 and SHA-1 Message-Digest Algorithms
Normatively referenced by — RFC 6273: The Secure Neighbor Discovery (SEND) Hash Threat Analysis
Informatively referenced by — RFC 6120: Extensible Messaging and Presence Protocol (XMPP): Core
Informatively referenced by — RFC 5751: Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.2 Message Specification
Informatively referenced by — RFC 6151: Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms
Informatively referenced by — RFC 6039: Issues with Existing Cryptographic Protection Methods for Routing Protocols
Informatively referenced by — RFC 4843: An IPv6 Prefix for Overlay Routable Cryptographic Hash Identifiers (ORCHID)
Informatively referenced by — RFC 6929: Remote Authentication Dial In User Service (RADIUS) Protocol Extensions
Informatively referenced by — RFC 5752: Multiple Signatures in Cryptographic Message Syntax (CMS)
Informatively referenced by — RFC 5997: Use of Status-Server Packets in the Remote Authentication Dial In User Service (RADIUS) Protocol
Informatively referenced by — RFC 4945: The Internet IP Security PKI Profile of IKEv1/ISAKMP, IKEv2, and PKIX
Informatively referenced by — RFC 7677: SCRAM-SHA-256 and SCRAM-SHA-256-PLUS Simple Authentication and Security Layer (SASL) Mechanisms
Informatively referenced by — RFC 6149: MD2 to Historic Status
Informatively referenced by — RFC 7298: Babel Hashed Message Authentication Code (HMAC) Cryptographic Authentication
Informatively referenced by — RFC 4894: Use of Hash Algorithms in Internet Key Exchange (IKE) and IPsec
Informatively referenced by — RFC 6008: Authentication-Results Registration for Differentiating among Cryptographic Results
Informatively referenced by — RFC 6150: MD4 to Historic Status
Informatively referenced by — RFC 7681: Email Exchange of Secondary School Transcripts
Informatively referenced by — RFC 10004: Certificate Management over CMS (CMC): Compliance Requirements