Re:Linus' reply on Git and SHA-1 collision
by throwmenow_0140 on Friday February 24, 2017 @05:38AM
(#13722529)
>>> len('''> Wow, Linus raises an entirely different issue which is that the PDF-based attack can't and won't work on git at all. Due to length prefixing it is extremely difficult to insert some nonsense into the middle of a git object which is how this attack works on PDFs.''')
264
>>> len('''Please note that the shattered-{1,2}.pdf files both have exactly the same length. And even with cleartext it is easy to pad passages so they contain the same amount of bytes. See how the quoted paragraph above has exactly the same number of characters as this one.''')
264
Re:Linus' reply on Git and SHA-1 collision
by makomk on Friday February 24, 2017 @06:36AM
(#13722740)
Indeed, they probably have to have the same length since the length is inserted into the final block as part of SHA-1 hashing and every block after the collision must be the same. I don't think it's even possible to create a MD5 collision between two documents of different length yet.
Re:Linus' reply on Git and SHA-1 collision
by yellowapple on Friday February 24, 2017 @06:08AM
(#13722638)
I'd be more impressed if both paragraphs also had the same SHA-1 hash ;)
Re:Linus' reply on Git and SHA-1 collision
by brillyfresh on Friday February 24, 2017 @09:23AM
(#13723847)
What if the hash of the second paragraph had exactly the same number of characters as the hash of the first one? ;)
Please note that the shattered-{1,2}.pdf files both have exactly the same length. And even with cleartext it is easy to pad passages so they contain the same amount of bytes. See how the quoted paragraph above has exactly the same number of characters as this one.