3 ms·
>The most it can give you is an association to a key ID, which is (1) brute-forceable This is false. That would mean brute forcing a 160 bit SHA-1 hash. That i
by upofadown 3y ago
>The most it can give you is an association to a key ID, which is (1) brute-forceable
This is false. That would mean brute forcing a 160 bit SHA-1 hash. That is not possible.
- woodruffw 3y agoThis is wrong on every conceivable level: 1. Key IDs are 32-bit truncations of the SHA-1 hash. That means 32 bits of state, not 160. Fake key IDs are observable in the wild[1]. 2. You're confusing pre-image resistance with collision resistance. SHA-1 has been publicly vulnerable to practical collision attacks since 2017[2]. [1]: https://www.phoronix.com/news/Short-PGP-Collision-Attacks https://www.phoronix.com/news/Short-PGP-Collision-Attacks [2]: https://shattered.io/ https://shattered.io/
- upofadown 3y agoOK, you are talking about the 64 bit keyID. The 32 bit keyIDs are no longer used for the reason you state. Shattered is about SHA-1 use in key signatures. It has nothing to do with keyIDs.