Re: rsync and md4

["Perry E. Metzger" <perry@piermont.com>]

Mike Duvos writes:
> Perry writes:
> 
> > I'm afraid you are totally wrong here. MD4 has been completely
> > broken. I wouldn't trust it for anything. In fact, MD5 is no longer
> > trustworthy, either -- it was broken recently. Stick to SHA.
> 
> Has MD5 been broken again?  Or are you referring to that little
> collision problem which is unlikely to affect the security of the
> typical real life application?

I'm not refering to the old pseudocollision problem in the compression
from over a year back. A couple of months ago a real break was made as
I recall. It wasn't perfect but it was enough.