The first chosen-prefix collision for SHA-1

Re:The first chosen-prefix collision for SHA-1 by WorldMaker on Tuesday January 07, 2020 @01:06PM (#21982645)

On a long enough time scale Bridge Engineers still have to worry about decay, entropy, collisions. Some of that can even be attributed to the "progress of science", as bridges have collapsed because earlier assumptions were invalidated by larger trucks, for instance.

An issue so far for computer security is less that decay and entropy happen, but that they happen so fast that the timescales are decades or even years rather than lifetimes.

[ Parent | on HN ]

Re:The first chosen-prefix collision for SHA-1 by candu on Tuesday January 07, 2020 @01:41PM (#21983099)

This is a great point in general: sometimes the problem isn't an adversary using knowledge in your field against you, it's the unintended consequences of progress / changes in adjacent fields.

It also underscores that, when dealing with things like passwords, it's helpful to be able to seamlessly upgrade to more robust methods down the line, e.g. "if this password hash was generated using the old method, check the login using that method but rehash and update the database using the new method after authentication."

[ Parent | on HN ]