Understanding sha-1 collision weakness

后端 未结 3 2050
走了就别回头了
走了就别回头了 2020-12-05 08:36

According to various sources, attacks looking for sha-1 collisions have been improved to 2^52 operations:

http://www.secureworks.com/research/blog/index.php/2009/6/3

3条回答
  •  温柔的废话
    2020-12-05 09:07

    The result announced in your link is an attack, a sequence of careful, algorithmically-chosen steps that generate collisions with greater probability than would a random attack. It is not a weakness in the hash function's distribution. Well, ok, it is, but not of the sort that makes a random attack likely on the order of 2^52 to succeed.

    If no one is trying to generate collisions in your hash outputs, this result does not affect you.

提交回复
热议问题