3 ms·
About tor: if an attacker produces a public key that collides with the SHA-1 hash of someone else's hidden service, then he would still need to generate the cor
by rnhmjoj 10y ago
About tor: if an attacker produces a public key that collides with the SHA-1 hash of someone else's hidden service, then he would still need to generate the corresponding RSA-1024 private key, which is infeasible as of today.
Is this correct?
- runeks 10y agoThe two private keys need not be the same; if their corresponding public keys both hash to the same value, a signature from either private key is acceptable.
- nabla9 10y agoThe method presented works only with data formats where you can add section of 'calculated junk' into the data. Public key can't contain junk and work, so I don't see how this method would work.