Re:Linus' reply on Git and SHA-1 collision
by comex on Friday February 24, 2017 @02:22AM
(#13721726)
Not much harder than creating a collision in each of the hash functions, sequentially. You can't combine two broken hashes into a strong hash. But as long as at least one of them remains unbroken, then their concatenation is clearly secure too - assuming you keep the full result of each hash function and concatenate them into a long output, rather than trying to combine them somehow. Since it's impossible to know how resilient a given hash function will turn out to be against future cryptanalysis, it can make sense to hedge your bets by combining dissimilar functions.
[ Parent
| on HN ]
There are no comments on this comment yet.