News for hackers. Stuff that matters.
Re:The birthday paradox in action: calculating the probabili... by Xylakant on Wednesday November 07, 2012 @02:55PM (#4754886)
Actually I was trying to express that the birthday paradox does not apply when you to find a plaintext that evaluates to a known hash, as you'd need to do for password cracking or forging a signed email for example[1]. The birthday paradox only gives you the probability that of a random set of hashes, two are the same. It's "if I generate n random pieces of plaintext, how big is the chance that two of them generate the same hash." Actually it gives you the probability of picking the same element twice from a finite set of elements when you pick n times.

[1] When generating emails more restrictions apply: The colliding plaintexts have to be at least somewhat coherent and probably should express something the attacker wants to express.

Edit: Forgot a negation in a crucial place. Darn.

Re:The birthday paradox in action: calculating the probabili... by ColinWright on Wednesday November 07, 2012 @03:44PM (#4755099)
Yes, and that's exactly the point that is addressed in the box I quoted.

You're exactly right, and I believe it's covered. I didn't go into detail about the problems involved in generating a plain text that hashes to a specific hash,such as you mention. I did simply mention that the problem I'm talking about is not that one.

So I don't understand the point dsego was making, because I think my reference is relevant.

At this point I'm no longer sure it really matter.

Re:The birthday paradox in action: calculating the probabili... by dsego on Wednesday November 07, 2012 @05:47PM (#4755563)
Sorry, I think I was a bit confused. Now I see that it is the same thing. Sorry for wasting your time :(
Re:The birthday paradox in action: calculating the probabili... by ColinWright on Wednesday November 07, 2012 @05:56PM (#4755596)
You haven't wasted my time. You've made me think harder, you've made me reconsider my explanation, and I've helped you become unconfused.

Not a problem, and you're welcome!