5 ms·

which well known 256 bit hash is broken?

jagger27 5y ago
Let’s assume you’re right and the crypto itself is sound. I agree that is likely and doubt any TLAs have a significant mathematical edge. Does the NSA just stop there and call it a day? No, of course they write Stuxnet. They attack everything else. What well known piece of software isn’t broken?
- SnowHill9902 5y ago
  FreeBSD?
  - jagger27 5y ago
    I think you mean OpenBSD. From their homepage: > Only two remote holes in the default install, in a heck of a long time! FreeBSD, not so much. https://www.cvedetails.com/vulnerability-list/vendor_id-6/product_id-7/Freebsd-Freebsd.html https://www.cvedetails.com/vulnerability-list/vendor_id-6/pr...
    - staticassertion 5y ago
      Keep in mind that openbsd has a tiny base install, so it's not exactly surprising that there aren't a lot of remote exploits. Nothing's listening by default, so why would there be? By the time you set up OpenBSD to do anything, that's gonna change.
      - jagger27 5y ago
        Indeed. “Default install” is a big asterisk.
SnowHill9902 5y ago
Up to 1024 bit is considered to be broken (not mathematically but at least by means of brute force) against state actors in a targeted attack.
- dagenix 5y ago
  What do you mean by "brute force"? Find a collision? I think it's almost certain the combined resources of every computer ever made would be unable to brute force a collision in a 1024 bit hash.
- staticassertion 5y ago
  That does not sound right. Are you talking about RSA?
- wolf550e 5y ago
  You're confusing symmetric and asymmetric cryptography, it's such a basic mistake that maybe you should not comment on cryptography until you've read some more. SHA-256, SHA-3-256, BLAKE2, BLAKE3, etc. are all not-broken and have "128 bits of security". 256bit ECC like NISP P-256 ECDHE, ECDSA and ECIES, X25519 ECDHE and Ed25519 EdDSA are not-broken and have "128 bits of security". RSA and FFDHE at 3072 bit are not broken and have about "128 bits of security". RSA-2048 remains very popular, although it is only about 112 bits of security. See https://security.stackexchange.com/a/230713/70830 https://security.stackexchange.com/a/230713/70830 and the links from it for more info.

Let’s assume you’re right and the crypto itself is sound. I agree that is likely and doubt any TLAs have a significant mathematical edge. Does the NSA just stop there and call it a day? No, of course they write Stuxnet. They attack everything else. What well known piece of software isn’t broken?

SnowHill9902 5y ago
FreeBSD?
- jagger27 5y ago
  I think you mean OpenBSD. From their homepage: > Only two remote holes in the default install, in a heck of a long time! FreeBSD, not so much. https://www.cvedetails.com/vulnerability-list/vendor_id-6/product_id-7/Freebsd-Freebsd.html https://www.cvedetails.com/vulnerability-list/vendor_id-6/pr...
  - staticassertion 5y ago
    Keep in mind that openbsd has a tiny base install, so it's not exactly surprising that there aren't a lot of remote exploits. Nothing's listening by default, so why would there be? By the time you set up OpenBSD to do anything, that's gonna change.
    - jagger27 5y ago
      Indeed. “Default install” is a big asterisk.

SnowHill9902 5y ago

Up to 1024 bit is considered to be broken (not mathematically but at least by means of brute force) against state actors in a targeted attack.

dagenix 5y ago
What do you mean by "brute force"? Find a collision? I think it's almost certain the combined resources of every computer ever made would be unable to brute force a collision in a 1024 bit hash.
staticassertion 5y ago
That does not sound right. Are you talking about RSA?
wolf550e 5y ago
You're confusing symmetric and asymmetric cryptography, it's such a basic mistake that maybe you should not comment on cryptography until you've read some more. SHA-256, SHA-3-256, BLAKE2, BLAKE3, etc. are all not-broken and have "128 bits of security". 256bit ECC like NISP P-256 ECDHE, ECDSA and ECIES, X25519 ECDHE and Ed25519 EdDSA are not-broken and have "128 bits of security". RSA and FFDHE at 3072 bit are not broken and have about "128 bits of security". RSA-2048 remains very popular, although it is only about 112 bits of security. See https://security.stackexchange.com/a/230713/70830 https://security.stackexchange.com/a/230713/70830 and the links from it for more info.