3 ms·
Murmurs main issue (in an attacker controlled context) is how it incorporates the seed in to the hash, not unexpected collisions on non-malicious data. Further
by floody-berry 14y ago
Murmurs main issue (in an attacker controlled context) is how it incorporates the seed in to the hash, not unexpected collisions on non-malicious data.
Further, _any_ hash, even cryptographic, will not protect you if it is not used with a random seed unknown & unpredictable to the attacker.
- pjscott 14y agoYou have a practical way to generate collisions in, say, SHA-256?
- floody-berry 14y agoYou only need to generate collisions for the keyspace used. Brute forcing 20-30 bit collisions in any hash function is trivial.