Gary, I provided a URL in my original note and don't recall that URL off the top of my head. The statement is embedded inside FIPS 180-1 itself. Btw, late breaking news is that someone at NIST is actively looking into the current exportability state of SHA-1. If I get more data, I will pass it along straight away. Ran rja@cisco.com --