Re:The first chosen-prefix collision for SHA-1
by harikb on Tuesday January 07, 2020 @11:19AM
(#21981370)
At least in our case problem can be solved by re-encryption. Yes, we have to keep up to date with developments before everything is completely broken, but it is not bad as discovering a bridge needs to be rebuilt. Speaking of which, it is common to have to retrofit for earthquakes which probably wasn’t the rule when they built the original bridge
[ Parent
| on HN ]
Re:The first chosen-prefix collision for SHA-1
by hansvm on Tuesday January 07, 2020 @02:05PM
(#21983413)
That depends on your threat model. A patient attacker can store all of your encrypted messages till some future point where decryption is economically feasible. Since they already have the weakly encrypted data, encrypting it again doesn't solve anything.