4 ms·
>> SHA is Memoryless and Progress-Free > Technically false, because memory-less processes have positive probabilty of yielding no block after 2^256 tries, wher
by gtrubetskoy 9y ago
>> SHA is Memoryless and Progress-Free
> Technically false, because memory-less processes have positive probabilty of yielding no block after 2^256 tries, whereas for sha-256 using brute force, this probability is totally 0. I don't think this matters at the current hash-rate though.
You may be right about my use of "memoryless", though it won't matter at any hashrate :) "...brute-force attacks against 256-bit keys will be infeasible until computers are built from something other than matter and occupy something other than space" (B. Schneier "Applied Cryptography").
- AstralStorm 9y agoThat depends on how much quantum computing would speed up the collision search.
- rocqua 9y agoI totally agree, in practice sha-256 is just memoryless. Based on the current hash rate it would be about 10^40 life-times-of-the-universe to cover all possible hashes presuming no collisions.