Re:SHA-1 'fully and practically broken' by new collision (2020)
by marcan_42 on Tuesday October 12, 2021 @10:55PM
(#28847720)
Nope. Google's break of SHA-1 was reusable in the sense that you can add an arbitrary (identical) suffix to both PDFs and keep the collision. But Git does not use raw SHA-1 hashes, it adds a prefix before computing object hashes. Therefore, Google's break of SHA-1 cannot be reused to break Git.
[ Parent
| on HN ]
There are no comments on this comment yet.