3 ms·
Reversing a hash is impossible, so a collision is "reversing" it. All that really matters is that you've got something that the auth system will think is the ri
by SoftwareMaven 15y ago
Reversing a hash is impossible, so a collision is "reversing" it. All that really matters is that you've got something that the auth system will think is the right password.
- JoachimSchipper 15y agoYou're confusing a collision (find any x, y such that f(x) = f(y)) and a second preimage attack (find any x such that f(x) = y for some particular y). The latter is much more difficult, but the former can still be used - see "rogue CA".