Ok, what about PGP (was: MD5 collisions)

[Mutatis Mutantdis]

I poked around the pgp.h and pgformat.txt files in the PGP 2.6.2
distribution.  There *are* designator bytes for the hash (and cipher)
algorithms, hash size, etc.

It seems quite doable to add support for SHA-1 signatures (and possibly key
generation for encrypting secret keys?).

Adding 3DES (and maybe Luby-Rackoff-SHA, assuming it hasn't been cracked
recently at the Fast Software Conf.... more info?!?) would be nifty too...
unless, of course, there's meaning to the Real Soon Now that PGP3 folx
claim.

I
d work on the hack now (and just might...) but I'm stuck stranded in the
United States. :(


Rob.