4 ms·

Do I understand this right: if the length of the original file is specified along with the hash, then such attacks are not trivial?

• dnet 12y ago
  Yes, see http://blogs.msdn.com/b/oldnewthing/archive/2004/05/19/134937.aspx http://blogs.msdn.com/b/oldnewthing/archive/2004/05/19/13493...
• fryguy 12y ago
  It's not necessarily true: http://cryptopals.com/sets/7/challenges/53/ http://cryptopals.com/sets/7/challenges/53/