摘要： 2004年8月，在美国召开的国际密码学会议上，来自中国山东的王小云教授宣布成功破译了MD5、HAVAL-128、MD4和RIPEMD算法，并在任何初始值下用2^40次Hash运算给出了SHA-0的碰撞。这意味着目前广泛应用于电子商务、银行系统、证卷系统的安全认证算法——Hash函数分析领域堡垒的轰然倒塌。面对严峻而残酷的现实，依赖于Hash算法的银证系统数据安全传输问题，也就成为人们不得不及时解决的实际问题。该文给出了一种银证系统数据安全传输的综合防御措施。

关键词: SHA-1, MD5, WAP, AES, WTLS

Abstract: On the conference of the international cryptology association which was convened at the United States in August 2004, professor Wang who comes from Shandong of Chinese declared that they had successfully broken the algorithms of MD5, HAVAL-128, MD4 and f RIPEMD, and used the two of the fortieth power Hash operates under any initial value to give the collision of the SHA-0. This means that the algorithms of security authentication extensively applied currently in the electronic commerce, bank system, and stock system tumblingly breaks down, which is the field of Hash function analysis. Confronting with the rigorous and ruthlessness reality, people have to try to resolve this problem in time,which is the Hash functions based data transmission problems of the stock and bank system. Therefore, this paper provides a comprehensive defense measure of data transmission in the stock and bank system.

Key words: SHA-1, MD5, WAP, AES, WTLS

中图分类号: 

• TP393.08