35 ms·
> I'm concerned about people like me who use noscript selectively. How easy is it to create a malicious file that matches the checksum of a known file? SHA-256
by AnkhMorporkian 10y ago
> I'm concerned about people like me who use noscript selectively. How easy is it to create a malicious file that matches the checksum of a known file?
SHA-256? Very, very, very, very hard. I don't believe there are any known attacks for collisions for SHA-256.
- jmiserez 10y agoI think even a collision (any collision) has yet to found.
- dexterdog 10y agoAnd if you worry about that you can always use 384. Plus a side benefit is that 384 is faster on a 64-bit processor.
- dinkumthinkum 10y agoPeople make too big a deal of this collision stuff, a lot of times these are very theoretical would require tremendous computation. Anyway, for this use case, even md5, how likely really to make a useful malicious that file collides with a particular known and widely used one? I dunno seems pretty unlikely.