PDA

View Full Version : Is it true that SHA-1 has been broken


View Full Version : Is it true that SHA-1 has been broken


CactusChris
February 16th, 2005, 04:56 AM
Well that is what this article says:
http://it.slashdot.org/article.pl?sid=05/02/16/0146218&from=rss

If true then ..... what

Regards
Chris

Afn
February 16th, 2005, 08:37 AM
Well that is what this article says:
http://it.slashdot.org/article.pl?sid=05/02/16/0146218&from=rss

If true then ..... what

Regards
Chris
Relax... it still takes 2^69 tries. That is 590,295,810,358,705,651,712 hash operations. To brute force sha-1 it takes 2**80. This is only 2**11 times faster then a brute force attack... thats 2048 times faster. Its significant but it's not that big of a deal. It is no more significant then if someone with a 2000 node cluster tried to brute force your hash (which is completely feasible...especially for large government agencies like the NSA). In other words, if you were capable of performing 1 trillion (1,000,000,000,000) hash operations per second, it'd still take nearly 19 years for a collision to be found. I assume the NSA can knock that number down to under 24 hours, but thats expected of them. For anyone else in the world, assuming your not being followed by the NSA... and god help you if you are... sha-1 will still be fine and the entire internet security infastructure will not need to be redesigned.


Interesting but bit torrent hashes are ok for now. That could change with faster processors, but nothing to worry about anytime soon, unless you plan to be here when we have 1 or 100 trillion hash functions per second on a single desktop.

Digital Bliss
February 16th, 2005, 11:40 AM
you forgot windows its self and active x in your poll :p

cpugeniusmv
February 16th, 2005, 12:07 PM
you forgot windows its self and active x in your poll :p
wrong thread?

in regards to sha-1: read the comments in the article. i wouldn't worry about it.

Abyss00
February 16th, 2005, 01:39 PM
Yeah, is sounds like you need a supercomputer to be able to break it.

Don't know of many supercomputers that sit around with nothing to do but break SHA-1. lol

cpugeniusmv
February 16th, 2005, 01:53 PM
Yeah, is sounds like you need a supercomputer to be able to break it.

Don't know of many supercomputers that sit around with nothing to do but break SHA-1. lol
/me looks down in his basement

i don't have a basement

Abyss00
February 16th, 2005, 02:11 PM
/starts making plans to break into cpugeniusmv's basement

black_magiic
February 16th, 2005, 04:35 PM
I shall join you in that endeavour.

infringer
February 16th, 2005, 05:06 PM
Unless theres a simple Exploit on the OS of a security device itself to get the information would be take a phenominal amount of time...

-infringer-

Ogi
February 16th, 2005, 05:13 PM
IBM's Cell chip anyone?

I wonder, from what i heard that chip has awsome number crunching ability, and you can have as many as you want clustered together. I wonder how many years before these will be available, and then how fast could they crack it....