From spaf@cs.purdue.edu  Thu Aug 15 23:24:36 1996
Received: from arthur.cs.purdue.edu (root@arthur.cs.purdue.edu [128.10.2.1]) by suburbia.net (8.7.4/Proff-950810) with ESMTP id XAA12361 for <best-of-security@suburbia.net>; Thu, 15 Aug 1996 23:24:20 +1000
Received: from uther.cs.purdue.edu (root@uther.cs.purdue.edu [128.10.2.20]) by arthur.cs.purdue.edu (8.7.4/PURDUE_CS-1.4) with ESMTP id IAA02737; Thu, 15 Aug 1996 08:23:28 -0500 (EST)
Received: from localhost (spaf@localhost [127.0.0.1]) by uther.cs.purdue.edu (8.7.4/PURDUE_CS-1.4) with SMTP id IAA02976; Thu, 15 Aug 1996 08:23:26 -0500 (EST)
Message-Id: <199608151323.IAA02976@uther.cs.purdue.edu>
To: Jim Clausing <jac@postbox.acs.ohio-state.edu>
cc: Rik Farrow <rik@spirit.com>, firewalls@GreatCircle.COM,
        swlodin@eng.delcoelect.com, best-of-security@suburbia.net
Subject: Re: BoS: Re: USENIX Symposium Firewalls BOF Notes 
X-URI: http://www.cs.purdue.edu/people/spaf
X-Face: #Qsg)Z|}R*yk&8kWAs-y5(S=7}fDA:S;%d:gf$3VC<+5./P.gGhK7S)zL]EumGX}
  _*GuP+vNhr0qVCDP9VWfZH${(8htny}Y.#zgaNN4-l:i+RPD)!Ok7t`VxeH7TT!8jzV2?]
  _wv\J@EZi_4V!&ss7UQgQ2ZzeR<}>|!#z3cw*?%\@bGY}o_PI81of<Q<6,nz~_J_nD7voU
  @ql1%x,dw^xAHcDs7}tVK32Mn,
In-reply-to: Message from Jim Clausing <jac@postbox.acs.ohio-state.edu>  of
    "Thu, 15 Aug 1996 08:27:06 -0400"
    <Pine.MCT.3.95.960815082336.1446D-100000@cantor.uts.ohio-state.edu> 
Date: Thu, 15 Aug 1996 08:23:24 -0500
From: spaf@cs.purdue.edu (Gene Spafford)

> This is the second time that I have seen this remark.  Perhaps that was
> the recollection of those present, but the documentation for tripwire says
> that signature 7 in SHA.  Granted, it is not one of the defaults, you have
> to explicitly ask for it, but it looks to me like tripwire does indeed
> support SHA.  Gene, care to correct me?

No correction necessary as you are correct.  SHA has been in Tripwire
since release 1.2, made 2 years ago next week.

Signatures/checksums included in the distribution are MD5, SNEFRU, two
CRC implementations, MD4, MD2, SHA, and HAVAL.   The default sigs are
MD5 and SNEFRU -- any of the others can be added as defaults by a
one-character configuration change.

--spaf