5 ms·
>Can I try it out for myself? Since our attack on SHA-1 has pratical implications, in order to make sure proper countermeasures have been pushed we will wait fo
by emilfihlman 7y ago
>Can I try it out for myself?
Since our attack on SHA-1 has pratical implications, in order to make sure proper countermeasures have been pushed we will wait for some time before releasing source code that allows to generate SHA-1 chosen-prefix collisions.
Sigh. Again with this idiocy. All instances where the adversary is capable of launching this attack financially mean they also have the capability to write the exploit themselves.
- DarkWiiPlayer 7y agoIt does make sense. Targets worth attacking at a high financial cost will most likely be the first to take measures against this attack. The kind of target that takes a longer time to switch most likely isn't worth attacking unless it's a very cheap and fast operation. And the longer you spend developing an exploit, the less viable the attack will become.
- lm28469 7y ago> All instances where the adversary is capable of launching this attack financially mean they also have the capability to write the exploit themselves. Iran will eventually create a nuclear bomb, why don't we gave them one now, it's the same thing isn't it ?