Re:Users reporting artifacts appearing in old images stored ...
by userbinator on Sunday September 25, 2022 @03:27PM
(#32975050)
MD5 still has no known preimage attacks. Neither does MD4, for which collisions are absolutely trivial to generate.
Re:Users reporting artifacts appearing in old images stored ...
by a1369209993 on Sunday September 25, 2022 @07:30PM
(#32977566)
To be fair, it may yet turn out that MD5 is (and has always been, we just didn't know it yet) a low-quality hash that can be trivially preimage-attacked. I think that's unlikely[0], but I can easily imagine someone reasonable being a bit more pessimistic. I certainly wouldn't willingly rely on MD5 preimage resistance for anything important.
0: I'd be willing to bet money at 1:1 odds that MD5 preimages still cost at least 2^96 bit operations (out of a nominal 2^127 hash invocations) 5, 20, or 100 years from now.
Nothing about rsync.net per se, other than the general idea that any data you put on "somebody else's server" can't be trusted to stay the same if you don't have a high-quality integrity-comparison content-hash of that data kept somewhere.