39 ms·
A GUID is not a cryptographic hash function. In any case, in 2023 I back-of-the-envelope estimated that you could compute 2^64 SHA256 for ~$100K, using rented
by Retr0id 1y ago
A GUID is not a cryptographic hash function.
In any case, in 2023 I back-of-the-envelope estimated that you could compute 2^64 SHA256 for ~$100K, using rented GPU capacity https://www.da.vidbuchanan.co.uk/blog/colliding-secure-hashes.html https://www.da.vidbuchanan.co.uk/blog/colliding-secure-hashe...
- 8organicbits 1y agoThat's great analysis. As you call out in the post, the 2^64 value is used to attack SHA256-128 (SHA256 truncated to 128 bits). NIST recommends at least SHA-224, which makes sense given your conclusions.