More Hash Functions Broken. Following up on this
rumor from earlier today.
There is still no confirmation out there of the break in SHA-1, but this preprint, which
went up today, reports collisions in MD4, MD5, HAVAL-128 and RIPEMD,
all achieved with very little CPU time. That pretty much covers all
the cryptographic hash functions in use.
It feels as though once someone found the right thread to pull on, the
whole sweater started to unravel. [Diminished Capacity]
If these breaks turn out to be real, it would render all existing digital signatures useless. That’s a pretty big deal, as digital signatures are used in a things like downloadable software updates and web pages.
Leave a Reply