You could also find a preimage for any tree or blob object referenced by that commit. And in large projects, you have a lot to choose from. (As has been state

You could also find a preimage for any tree or blob object referenced by that commit. And in large projects, you have a lot to choose from. (As has been stated, I know this isn't a second preimage attack.) Edit: See my answers in this thread: https://lists.gnu.org/archive/html/bug-guix/2016-06/msg00009.html https://lists.gnu.org/archive/html/bug-guix/2016-06/msg00009...