5 ms·
The issue is that if these files are distributed elsewhere by 3. parties, it is trivial for those 3. parties change and compromise the files, but still make the
by noselasd 9y ago
The issue is that if these files are distributed elsewhere by 3. parties, it is trivial for those 3. parties change and compromise the files, but still make the files produce the same MD5 sum.
- hawski 9y agoWouldn't it be easier for said third parties to just distribute changed checksum?
- noselasd 9y agoThen it would also be trivial to discover if you go and look up the sums at the official site.
- temprature 9y agoIf you think a preimage attack against MD5 is "trivial" you should demonstrate it. People would be very interested in this because no one has managed to do it yet. Creating two files with the same MD5 is a very different beast from creating a file with the same MD5 as an arbitrary pre-existing file. These third parties would need to have colluded with the DragonFly developers to make what you're proposing possible.