Timeline for What are the implications of a SHA-1 collision being found?
Current License: CC BY-SA 3.0
11 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 28, 2021 at 15:50 | comment | added | hola | HMAC SHA 1 looks interesting. May be, I'll ask a question about it đ€ | |
| Mar 1, 2017 at 18:11 | comment | added | derobert | Another thing: apparently the collision breaks Subversion; e.g., blogs.collab.net/subversion/… seems like a good explanation | |
| Feb 25, 2017 at 14:22 | vote | accept | Matthew | ||
| Feb 24, 2017 at 9:16 | comment | added | Matthew | @PaĆloEbermann Ah, that makes more sense, although there currently isn't such a collision known. I don't know whether it would be possible to generate such a message - but it would be bad to assume it was impossible! | |
| Feb 24, 2017 at 8:16 | comment | added | SilverlightFox | The TLS/SSL handshake combines both hashes like this in its PRF. Interesting to see a tried and tested protocol that works without "all its eggs in one basket". | |
| Feb 24, 2017 at 7:49 | comment | added | niilzon | @PaĆloEbermann why is it a bad idea ? For example it is common to hash Strings with SHA-256 and then with BCrypt (to use BCrypt's strenght but mitigate it's String size limitation with the help of SHA) | |
| Feb 24, 2017 at 4:50 | comment | added | Wildcard | @PaĆloEbermann, I interpreted your first comment as being about running one hash algorithm on the output of another (which is a bad idea) but looking more closely that's not what you meant, and you're correct. | |
| Feb 23, 2017 at 22:39 | comment | added | Paŭlo Ebermann | If a combined hash made of MD5 and SHA-1 (by concatenation) has a collision on a message, then both SHA-1 and MD5 have a collision for this message â or did I understand this wrong? | |
| Feb 23, 2017 at 20:01 | comment | added | Matthew | No, that's about combining hashes. I'm pointing out that other hash methods can still distinguish between colliding Sha-1 files. The answer you've referenced doesn't touch on this at all. | |
| Feb 23, 2017 at 19:40 | comment | added | Paŭlo Ebermann | Using both hashes is like using the concatenation, see Is using the concatenation of multiple hash algorithms more secure? for a result on this. | |
| Feb 23, 2017 at 17:37 | history | answered | Matthew | CC BY-SA 3.0 |