安全性大大改进,可算做能完全代替MD5的散列验证算法.-1.Large input message block size 2.provably resistant to differential attacks 3.Alternative sequential mode 4.Key input K??of up to 512 bits?? K is input to every compression function 5.1024-bit interm