Re:NIST Retires SHA-1 Cryptographic Algorithm
by bawolff on Thursday December 15, 2022 @03:20PM
(#34005122)
Im not a cryptographer, im kind of curious - is it possible to combine a birthday attack with grover's algorithm to attack sha256 in 2^64 time?
[ Parent
| on HN ]
Re:NIST Retires SHA-1 Cryptographic Algorithm
by adastra22 on Thursday December 15, 2022 @03:36PM
(#34005357)
You would get cube root speedup instead of sqrt for a collision (birthday attack), or sqrt instead of brute force for a preimage. So SHA256 is secure from preimage attacks even with a quantum computer, and gives 2^80 protection against collisions. SHA-2/384 would be sufficient for 128-bit security against collisions.