Re: Can SHA-1 produce dupe hash values?

From: Alan (a__l__a__n_at_hotmail.com)
Date: 09/30/04


Date: Thu, 30 Sep 2004 11:16:15 -0400


"Damian Menscher" <menscher+crypt@uiuc.edu> wrote in message
news:cjfdor$gn6$1@news.ks.uiuc.edu...
> car <car_member@newsguy.com> wrote:
> As you say, there can be collisions. However, the chances of seeing
> a random collision (from a so-called "birthday attack" are one in
> 2^80 (80 is half the SHA-1 hash size of 160 bits).

That is generally assumed, but not known to be true. We do not know that
all possible 160-bit permutations are possible outputs of SHA-1. To put it
another way, given the set of all possible 160 bit values as inputs to
SHA-1, it is not known how large the corresponding set of outputs is.



Relevant Pages

  • Re: Re-secured Algorithm?
    ... >>MD5 collisions are actually trivial to generate. ... SHA-1 had real collisions in MD5. ... Personal attacks aside I doubt many ...
    (sci.crypt)
  • Re: sha3 competition?
    ... way too much for practical use), using SHA-1 or Jenkin's Hashing (or ... Jenkins: 92501 collisions in 23712ms ... respect to its use in a Bloom filter. ... I always wondered if a cryptographic hash function can perform worse ...
    (sci.crypt)
  • Re: Re-secured Algorithm?
    ... Generate some collisions for everyone to see. ... >using SHA-1 if it means the life of the system will only be ten years? ... SHA-2 is way too new, AND is nowhere near as scrutinized. ... If it turns out that by 2010 there are still no major weaknesses found ...
    (sci.crypt)
  • Re: Re-secured Algorithm?
    ... > Show me a list of collisions that you personally have come up with ... two dual processor boxes and several single core boxes. ... 55,000 MIPS cluster]. ... using SHA-1 if it means the life of the system will only be ten years? ...
    (sci.crypt)
  • Re: Barcode Email
    ... SHA-1 isn't broken yet. ... make collisions but haven't produced one. ... That said people should just not use the SHA series if they really want ... Tom ...
    (sci.crypt)