Ron Rivest on why MD6 was withdrawn from the SHA-3 contest at NIST

http://groups.csail.mit.edu/cis/md6/OFFICIAL_COMMENT_MD6_2009-07-01.txt

by soundsop • 17 years ago

39 5 17 years ago

groups.csail.mit.edu

jacquesm• 17 years ago

In case anybody is interested, the md6 reference implementation is here: http://groups.csail.mit.edu/cis/md6/code/md6_c_code-2009-04-... , this was the one submitted to NIST and has now apparently been withdrawn.

scscsc• 17 years ago

It seems to be a very classy withdrawal. I wonder how much the other candidates satisfy the two 'suggestions'.

omail• 17 years ago

You echo Bruce Schneier's sentiments.

http://www.schneier.com/blog/archives/2009/07/md6.html

neilc• 17 years ago

Note that this is not identical to withdrawing MD6 from the "SHA-3 contest" -- they are just not entering the next round of the contest, because they haven't figured out how to prove the resistance of MD6 to differential attacks while making it as efficient as NIST require.

http://groups.csail.mit.edu/cis/md6/

ars• 17 years ago

Why not submit it on a provisional basis? i.e. full rounds, and let it be slow.

Would NIST reject it outright?

Ron Rivest on why MD6 was withdrawn from the SHA-3 contest at NIST

Related Stories