2 ms·
Interesting! :) But isn't the real lesson here that X.509 is flawed? Also, as the linked article says: > The bottom line is that no widely-studied hash funct
by bjornsing 10y ago
Interesting! :)
But isn't the real lesson here that X.509 is flawed?
Also, as the linked article says:
> The bottom line is that no widely-studied hash function has ever succumbed to a (second-)pre-image attack except for one.
And there are signatures that are provably resistant to collisions, shouldn't we move to such signatures?
- pvg 10y agoBut isn't the real lesson here that X.509 is flawed I don't think that's the case And there are signatures that are provably resistant to collisions, shouldn't we move to such signatures? It's just much simpler to move to a better hash function.
- bjornsing 10y ago> It's just much simpler to move to a better hash function. I don't see how one excludes the other. :P