Subject: Comments on draft-ietf-bfd-hmac-sha-05

From: Ashesh Mishra <[email-masked]>
Date: Thu, 31 Jul 2014 11:18:57 -0700

Authors,

While the need for good security within network protocols is paramount, has there been an analysis on the vulnerability of MD5 and SHA1 (specifically in BFD) to cryptanalysis? 

If the intention is to move towards stronger encryption algorithms for BFD (especially ones that use larger digests), the increased complexity and cost of hardware implementations (and also software implementations, but to a lesser degree) must be justifiable. 

Thanks,
Ashesh Mishra