EDN

Cryptography for embedded systems – Part 1: Security level categories & hashing

In this chapter we will look at choosing and optimizing cryptographic algorithms, particularly for resource-constrained systems, such as embedded systems. We will look at various strategies for ...
Ars Technica

SHA1 algorithm securing e-commerce and software could break by year’s end

SHA1, one of the Internet’s most crucial cryptographic algorithms, is so weak to a newly refined attack that it may be broken by real-world hackers in the next three months, an international team of ...
eWeek

Flame Exploited Long-Known Flaw in MD5 Certificate Algorithm

eSpeaks’ Corey Noles talks with Rob Israch, President of Tipalti, about what it means to lead with Global-First Finance and how companies can build scalable, compliant operations in an increasingly ...
Network World

Vulnerable security algorithms raise concerns

GAITHERSBURG, MD — Industry experts agree that the future of two widely used security algorithms is fated, but with no clear alternatives in sight products that rely on them may have to remain “good ...
Ars Technica

Fatally weak MD5 function torpedoes crypto protections in HTTPS and IPSEC

If you thought MD5 was banished from HTTPS encryption, you’d be wrong. It turns out the fatally weak cryptographic hash function, along with its only slightly stronger SHA1 cousin, are still widely ...
ZDNet

A quarter of major CMSs use outdated MD5 as the default password hashing scheme

Some of the projects that use MD5 as the default method for storing user passwords include WordPress, osCommerce, SuiteCRM, miniBB, SugarCRM, CMS Made Simple, MantisBT, Phorum, Observium, and X3cms.
CSOonline

Hashing explained: Why it’s your best bet to protect stored passwords

Hashing is a one-way cryptographic function while encryption is designed to work both ways. Encryption algorithms take input and a secret key and generate a random looking output called a ciphertext.
CSOonline

Security Algorithms Raise Concerns

Industry experts agree that the future of two widely used securityalgorithms is fated, but with no clear alternatives in sight, productsthat rely on them may have to remain “good enough” for some time ...