News for hackers. Stuff that matters.

A comment on The first chosen-prefix collision for SHA-1. Parent comment

Re:The first chosen-prefix collision for SHA-1 by bjornsing on Tuesday January 07, 2020 @10:47AM (#21981026)
A few emails forward in the thread Linus explains though why we don’t need to worry much about this attack in practice: https://marc.info/?l=git&m=148787287624049&w=2

This argument sounds sound to me.

[ Parent | on HN ]
Re:The first chosen-prefix collision for SHA-1 by Thorrez on Tuesday January 07, 2020 @11:27PM (#21988344)
His argument assumes the file is text and people read the entire thing. If either of those assumptions are false, then it's not safe.

People store things in git that aren't text. Therefore it's not safe.

[ Parent | on HN ]