Re: Report of collision-generation with MD5

From: Matthew Seaman (m.seaman_at_infracaninophile.co.uk)
Date: 08/18/04

  • Next message: Chris Doherty: "Re: Report of collision-generation with MD5" 
    Date: Wed, 18 Aug 2004 21:35:44 +0100
To: Mike Tancsa <mike@sentex.net>

    On Wed, Aug 18, 2004 at 02:21:18PM -0400, Mike Tancsa wrote:
    > At 01:58 PM 18/08/2004, Peter C. Lai wrote:
    > >Well while collisions are cryptographically significant, they don't
    > >necessarily impact any operational security of the the hash. (Since the
    > >collision merely means that there are possibly two inputs which will hash
    > >to
    > >the same digest).
    >
    >
    > As I have no crypto background to evaluate some of the (potentially wild
    > and erroneous) claims being made in the popular press* (eg
    > http://news.com.com/2100-1002_3-5313655.html see quote below), one thing
    > that comes to mind is the safety of ports. If someone can pad an archive
    > to come up with the same MD5 hash, this would challenge the security of the
    > FreeBSD ports system no ?
    >
    > * "MD5's flaws that have been identified in the past few days mean that an
    > attacker can generate one hash collision in a few hours on a standard PC.
    > To write a specific back door and cloak it with the same hash collision may
    > be much more time intensive. "

    At least the SHA-1 hash is still considered secure, and there's a
    whole series of SHA-nnn functions beyond that. I believe SHA-1 is
    already used implicitly by FreeBSD as the standard hash function used
    by gnupg(1) when digitally signing security alerts. Various SHA
    hashes are already given in a few ports distinfo files -- eg
    sysutils/coreutils, net/fping, misc/less -- although there seems to be
    no support in bsd.port.mk for checking anything other than MD5 as yet.

    I can't see any justification for giving up on MD5 just yet, but
    should the need eventually arise switching the ports over to an
    alternative hashing algorithm could be done relatively quickly.

            Cheers,

            Matthew 

    -- 
Dr Matthew J Seaman MA, D.Phil.                       26 The Paddocks
                                                      Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey         Marlow
Tel: +44 1628 476614                                  Bucks., SL7 1TH UK

  • Next message: Chris Doherty: "Re: Report of collision-generation with MD5"

    Relevant Pages

    • Re: Two-stage hashing (pre-hash big integer -> hash-array-index)
      ... > hash value instead of the key to generate the probe sequence. ... avoid all hashes with same home index following same collision chain, ... are the same will follow exactly the same collision chain. ... computes what I call the pre-hash, the large unsigned integer, from the ...
      (comp.programming)
    • Re: Report of collision-generation with MD5
      ... Well while collisions are cryptographically significant, ... necessarily impact any operational security of the the hash. ... to be altered will satisfy the conditions for the collision. ... Yale University School of Medicine ...
      (FreeBSD-Security)
    • Re: Panama hash collision question
      ... > No hash is literally collision free. ... We synchronize database systems by forming a checksum for each record ...
      (sci.crypt)
    • Re: keys and counters
      ... how many times can the counter be incremented before there is a collision in the hash, that is what i am asking. ... A hash function operated in such a counter mode as you suggest does not have this property - if I can guess or discover the input to the first block then I will know all the other blocks. ... You might think that some attacks are unreasonable/infeasible but do you really know what is possible to the world's largest employer of mathematicians, who have had for many years the world's largest computer budget and unlimited access to 60 plus years of classified research or what is possible for any of the other multi-billion dollar "smaller" big brothers?. ...
      (sci.crypt)
    • Re: Using hash to see if objects attributes have changed
      ... Storing the entire object instead of the hash is not likely to be *that* ... If all you care about is a flag that says whether the state has changed ... stateNow = hashlib.sha1)) ... across such a collision, leading to a bug that might cause loss of data. ...
      (comp.lang.python)