3 ms·
The thing is, collisions should correlate with hash length. If hashes were uniformly distributed, you should need about 2^160 hashes to find a SHA-1 collision.
by sigmoid10 5y ago
The thing is, collisions should correlate with hash length. If hashes were uniformly distributed, you should need about 2^160 hashes to find a SHA-1 collision. But researchers got that number down to 2^61. That's the difference between completely impossible, even with a state actor's level of resources, and almost possible with consumer grade hardware.
- naniwaduni 5y agoBrute-force collisions is a birthday attack, so you expect to find a collision in 2^80 hashes, not 2^160.
- usr1106 5y agoBirthday if you want to access any account. Not if you want to access a targeted account. Whether the math is right if it were birthday I don't remember at the moment.
- naniwaduni 5y agoCollisions don't help you access accounts.