News for hackers. Stuff that matters.
Re:Linus' reply on Git and SHA-1 collision by johncolanduoni on Friday February 24, 2017 @05:03AM (#13722416)
Yes, but you picked two hash functions which are known to be insecure. Their complexity reduction argument appears to apply to cases where you are not using pure brute force for either hash, which would be the case if you were attacking MD5 and SHA1.
Re:Linus' reply on Git and SHA-1 collision by hvidgaard on Friday February 24, 2017 @05:09AM (#13722443)
I did so quite on purpose. Both are concidered broken, but combined, only the bruteforce attack is known to work, i.e. "the whole is greater than the sum of its parts".