Re: Humble Contribution

From: Brian Ross (brian.ross.x_at_rogers.com)
Date: 01/30/04


Date: Fri, 30 Jan 2004 00:55:56 GMT


"Paul Rubin" <http://phr.cx@NOSPAM.invalid> wrote in message
news:7xr7xi9s5u.fsf@ruckus.brouhaha.com...
> "Brian Ross" <brian.ross.x@rogers.com> writes:
> > Tell me what the hash of 'X' | 'Y' is where Y = "abcde".
> > (X | Y will be 10 bytes)
>
> Brian, do you know how md5 works? If yes, you should be able to
> answer your own question easily. If not, it's better for you to go
> learn about it than bother other people with these "challenges".

Yes - that is why I am asking the question. I do not believe what you are
saying is possible. (See my other message)

> Also, the message extension attack doesn't let you set Y to whatever
> you want, like "abcde". Y has to have a specific format.

I now think I can see where you are headed... Y has to be prefixed with the
padding bytes and length of X?

In that case I believe I agree - you can choose a Y that will fit that
criteria.

> Actually crunching out an example can be done straightforwardly by
> modifying an md5 implementation to set the magic constants from your
> example, followed by some banging around to get all the little details
> right, probably about an hour of hacking to be on the safe side.
> Who's that supposed to be worth the effort to, unless they're getting
> paid?

It shouldn't require writing code or running some examples to try to
explain/prove what you are saying but I believe I now understand what you
are claiming. When I read what you were saying before - I took it to mean
that you can find the hash of X | Y of _any_ value of Y. I didn't get the
impression that you were placing restrictions on what Y had to look like.

Brian



Relevant Pages

  • Re: Humble Contribution
    ... "Paul Rubin" wrote in message ... > Brian, do you know how md5 works? ... the message extension attack doesn't let you set Y to whatever ...
    (sci.crypt)
  • Re: Hardcore Hospitality......
    ... Seems to me that a lot of the posts to this news group take that form ... saying something I didn't feel like saying, I'd say buh-bye and be out ... I'm still wondering if you actually read what happened according to Brian. ...
    (rec.motorcycles)
  • Re: where do so many tenses come from?
    ... I say "for Brian and me", ... I'm also strongly influenced by years of Latin, which of course is rather rigorous. ... I'm referring to a future reference to ... Are you saying that the ...
    (sci.lang)
  • Re: SPICE CUP 2009
    ... Hey did you see a movie called ?? ... movie but it was about Brian Jones and the guy who was supposed to work ... on his house and i guess try and keep him off drugs ..He started doing ... that is what ended up happing saying he drowned because of drugs. ...
    (rec.games.chess.misc)
  • Re: Good, Gawd! Not again!!!
    ... year and thats not saying much with loses to Vanderbilt and Kentucky. ... For Brian K's Las Vegas & Pictures Go To....... ...
    (alt.vacation.las-vegas)

Quantcast