3 ms·

How much of exploitability of SHA1 is due to cryptographic weaknesses, and how much are due to it's digest size? If you were able to generalize the SHA1 algori

How much of exploitability of SHA1 is due to cryptographic weaknesses, and how much are due to it's digest size? If you were able to generalize the SHA1 algorithm, to 256 bits, would it still be in the realm of exploitability?

IncRnd 6y ago
Both. The recent issues with SHA1 are that chosen prefix attacks can cause collisions. That's why it's a broken piece of crypto.
kroeckx 6y ago
SHA1 is 160 bits and should have a complexity of 2^80 for collision resistance. The last paper puts a chosen-prefix collision at 2^63.4.