3 ms·
There's an explanation of how this 'attack' was composed here: http://crypto.stackexchange.com/questions/44463/how-does-the-attack-on-md5-work-that-allows-a-fil
by MontagFTB 10y ago
There's an explanation of how this 'attack' was composed here: http://crypto.stackexchange.com/questions/44463/how-does-the-attack-on-md5-work-that-allows-a-file-to-show-its-own-full-hash http://crypto.stackexchange.com/questions/44463/how-does-the...
- bonzini 10y agoThe answer there doesn't explain chosen-prefix attacks, which are more powerful than building a collision out of a single prefix. They require much less flexibility in the fire format; building the PDF for shattered.io wasn't trivial exactly because the SHA-1 break didn't allow choosing two prefixes.