3 ms·
It's a sha256. It could definitely be a checksum for a file, although hashes like this is not an uncommon way to generate a large, unique password from a small
by matt_wulfeck 10y ago
It's a sha256. It could definitely be a checksum for a file, although hashes like this is not an uncommon way to generate a large, unique password from a small string or phrase.
Most passwords can be easily brute forced. A 64-byte string is a lot harder to brute force.
I actually think a sha2 is a little bit weird for a file checksum. I would expect md5 or a regular sha1. Or simply send the file with a gpg signature to validate the integrity (provided he still has some sort of trusted public key). Either way any off-the-shelf Mac can generate and verify these checksums.
My guess is that Snowden is starting to feel homesick and wants to start the process of returning to the USA. That's why he said "It's time." The tweet could be a password or a code to something but I don't think it's meant to embarrass or expose anybody.
- LeoPanthera 10y agoHow do you know it's a sha256, beyond the length?
- matt_wulfeck 10y agoI don't know for sure. It's 64-length hex string (not 156 like a lot of people are reporting), the same output as a sha256 checksum. Looks an awful lot like somebody opened up a terminal and typed in: > $ echo -n "some password" | shasum -a 256
- Natanael_L 10y agoMD5 is easy to generate collisions for (multiple chosen inputs with the same hash value), and SHA1 also just recently failed in collision security. Nothing odd with SHA256 for somebody like Snowden.