2 ms·
We don't use md5 for private/public keys because md5 is a hashing algorithm, unrelated completely to encryption. Also, what are your reasons to believe that md5
by enedil 5y ago
We don't use md5 for private/public keys because md5 is a hashing algorithm, unrelated completely to encryption. Also, what are your reasons to believe that md5 has been used there?
- Grollicus 5y agoHashes are generally a part of the signature generation used with certificates. See for example "What role do hashes play in TLS/SSL certificate validation?" -> https://security.stackexchange.com/questions/67512/what-role-do-hashes-play-in-tls-ssl-certificate-validation https://security.stackexchange.com/questions/67512/what-role... In certificates, md5 - and sha1 - was used quite some time after it was known to be weak, I suspect OP was thinking of that. This article seems to give a good summary what happened with sha1, mentions md5 in passing and links the related chromium issue: https://konklone.com/post/why-google-is-hurrying-the-web-to-kill-sha-1 https://konklone.com/post/why-google-is-hurrying-the-web-to-...