Bugtraq mailing list archives

Re: SHA-1 broken


From: Darren Reed <avalon () caligula anu edu au>
Date: Sun, 20 Feb 2005 04:24:17 +1100 (Australia/ACT)

In some mail from dullien () gmx de, sie said:

Hey all,

We abandon the requirement of collision resistance. This is a strange 
requirement, and is not supported by experience. Collision resistance 

we might think of changing the requirement of collision resistance
to "collision resistance in input data that is valid ASCII text". The
attacks on MD5 used the weak avalanche of the highest-order bit
in 32-bit words for producing the collision, basically precluding the
possibility of generating colliding ASCII text.

And what about the case for (uncompressed) binary images ?

Darren


Current thread: