News for hackers. Stuff that matters.
Re:Announcing the first SHA-1 collision by nneonneo on Thursday February 23, 2017 @06:37PM (#13719025)
It's a good thought, but if the functions have bounded-length outputs (as with all major hash functions), then your combined hash value is still a bounded length. A collision must therefore exist because there are many more potential messages than potential hash values.

If your functions produce unbounded-length hashes, then you may as well just be compressing your input to guarantee there are no collisions in your "hash".

Re:Announcing the first SHA-1 collision by digikata on Thursday February 23, 2017 @07:03PM (#13719258)
True - I suppose the hash function just ends up being the convolution of say an interior CRC and some exterior hash function. That gives us low to zero chance of something mathematically provable. But perhaps some arrangement of functions forces an attacker to scramble the inputs in more drastic ways such that the original data must be altered by more than a handful bytes it could perhaps raise the difficulty on a practical basis.
Re:Announcing the first SHA-1 collision by hueving on Friday February 24, 2017 @11:07AM (#13724858)
But to make a strong cryptographic hash, you don't want predictability based on inputs. If you end up with some kind of pattern where getting the same output values requires modifying huge ranges of bytes, that lets attackers reason about inputs that generated a hash.