4 ms·
I think it's simply that the blog author and commentators have an unrealistic threat model when it comes to how the legal profession uses MD5s. After the first
by evouga 3y ago
I think it's simply that the blog author and commentators have an unrealistic threat model when it comes to how the legal profession uses MD5s.
After the first high-profile case where authenticity of evidence gets called into question because a seized electronic document was deliberately doctored to allow for a hash collision (if that ever happens), there will be a will to change to something new.
- refulgentis 3y agoI doubt it, legal types won't see this as a math problem[1], but a legal problem (forging documents) [1] unless I'm missing something, this boils down to: "given f(x: string) => y, how can I minimize the odds that you can generate an X for a desired Y"